General

  • Target

    cdffba5b10628693a332d70a42d96e44eb56b4c3bf1167bc522e3d0517d7a97c

  • Size

    1.7MB

  • MD5

    f8c2581467f6038e611835f9c25cad1d

  • SHA1

    0cba3ecdd996f9bfa619f90a4e77b9a6db0da607

  • SHA256

    cdffba5b10628693a332d70a42d96e44eb56b4c3bf1167bc522e3d0517d7a97c

  • SHA512

    d3db3be5d71c3a755a658b023386033dbe37a55c19cc1463829bcc6df1947ab94aac7d8d1e70d308110c837de06eac2ba7f069232f5600bebe4338ff80f237c6

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+xLTlHLnEPr33Il+8F37XeB9bOLa2:ROdWCCi7/rahlqOdg6VLEL3e7/F9

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cdffba5b10628693a332d70a42d96e44eb56b4c3bf1167bc522e3d0517d7a97c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections