Overview

overview

10

Static

static

10

c113ffa392...ea.exe

windows7-x64

10

c113ffa392...ea.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c113ffa392d02b5633d05ee4c9605c3b21df18dabf17f8141f678876448430ea

  • Size

    1.7MB

  • MD5

    13a5e4992dcc41aca8dc46a26f1579c9

  • SHA1

    8aeab944fc7cf64421b83df4e2ba207efab43426

  • SHA256

    c113ffa392d02b5633d05ee4c9605c3b21df18dabf17f8141f678876448430ea

  • SHA512

    b4da7588e897b46b3fb06a5d618c341686b466a3facf4fc3d5ca9aeb144163195c0a6a791988f92776f529d9dc92f8cbb5c7490ed6ddf9485c830bedd9be029f

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARfHlivDQ3BzKdp+a8k4PUQu97411b3fnyNWGJ:ROdWCCi7/raZ5aIwC+ABcizEU737ut

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c113ffa392d02b5633d05ee4c9605c3b21df18dabf17f8141f678876448430ea
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections