General

  • Target

    d187e3342d6d3333afe1fa8fddd96c7cf346493cec72d419e13fcd02270884bb

  • Size

    1.2MB

  • MD5

    adfb891136e2fbe814a1ec3e836a1f87

  • SHA1

    05e5408c5f9051d26e814e276b7fdec018e31a71

  • SHA256

    d187e3342d6d3333afe1fa8fddd96c7cf346493cec72d419e13fcd02270884bb

  • SHA512

    d46332c08703968759c44db09a7b55583c529485dcbf0ded6b8ee903f694ebed30c80c053d446b8d9b916b5108dfdb10df1bff32e26b15defce7960132250088

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF672E55I6PFw12TJ1tmyNJeo55TadLHYwU6l5//TSUfl:ROdWCCi7/rahF3OioF5qdhN

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d187e3342d6d3333afe1fa8fddd96c7cf346493cec72d419e13fcd02270884bb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections