Overview

overview

10

Static

static

10

a7f394456b...fe.exe

windows7-x64

10

a7f394456b...fe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a7f394456b62c54835783a37dce0f4543a8bb6a57b739d49176402f29cc8e8fe

  • Size

    1.4MB

  • MD5

    ff33fdd471e909000a93eb2171d2b1ff

  • SHA1

    8e88fb7421223bd27e53e0aacf10ca16847b0d01

  • SHA256

    a7f394456b62c54835783a37dce0f4543a8bb6a57b739d49176402f29cc8e8fe

  • SHA512

    7eae8d81d62e7fede075b2d19e473caa48fa671beaf498201c27537aa5da7be8ab5127f26cdeb8f63704a90bdc51101b99974719f7569ff9651246b533c89740

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oFxyfmCc9C7mRBf3sysO:knw9oUUEEDl3aEUj93cyZ

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a7f394456b62c54835783a37dce0f4543a8bb6a57b739d49176402f29cc8e8fe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections