General

  • Target

    b49f19a546dd17c7500ecf21f8b97227142c31452f2e3f94936ed81f3878a19c

  • Size

    1.3MB

  • MD5

    3a3c56134195fc757220664fcd01aef1

  • SHA1

    ad4bfc37392cd57fd6fe2900147e29945ca2be13

  • SHA256

    b49f19a546dd17c7500ecf21f8b97227142c31452f2e3f94936ed81f3878a19c

  • SHA512

    de6bbc7eda37a6063514930909e64d2377fe06ab2ac253ad1a0a62ee1b6fea5e8a0a851a3c1d4cae06083024520901746ff6ed85e456cd1d8ce155e832765fba

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+Kwen8Z2IX7UULTdNRKuY/rk:ROdWCCi7/rahHxwxN8/g

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b49f19a546dd17c7500ecf21f8b97227142c31452f2e3f94936ed81f3878a19c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections