General

  • Target

    c9ab004f5c91c179f61b5add83eadc2d6e4b44f16f84b9343b9ea3c6586a0ec7

  • Size

    1.4MB

  • MD5

    43854d0375cb91aaad7053ef90fe82e8

  • SHA1

    ab43445c699d56c5f8dbd86e00c3468d3087ca71

  • SHA256

    c9ab004f5c91c179f61b5add83eadc2d6e4b44f16f84b9343b9ea3c6586a0ec7

  • SHA512

    0f81ffe9c0252d005d87393936fb6f41c3e851ae9cb2646e467633af75386dfc4a4ef9021a0883937ddab94fb83a7eccbaa7192a127112100192e514f0654aeb

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+KICdyyPo++UIUFlBaNC2L1SFO5ouCVbnK:ROdWCCi7/rahHxJTFlt2waoW

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c9ab004f5c91c179f61b5add83eadc2d6e4b44f16f84b9343b9ea3c6586a0ec7
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections