General

  • Target

    e066f6e7d985c29318dc7a63e81437accaa768a3fde2f17c0362c1f03dc1d04d

  • Size

    1.5MB

  • MD5

    6091fce947a29b86bfd518a70b9695b4

  • SHA1

    1808170591d38fb2cbc5fe472137688d5c5bec66

  • SHA256

    e066f6e7d985c29318dc7a63e81437accaa768a3fde2f17c0362c1f03dc1d04d

  • SHA512

    bb219913d42f113f5decf55471e918b6741fbfe481dd3ec25af95a648a80643d48a2caf7d0a6c6b2988d225f86f1a2f855cf7f249d1d360b04fca7f17d351f08

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTRdf5k5p8iKCoaX:RWWBiba4

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e066f6e7d985c29318dc7a63e81437accaa768a3fde2f17c0362c1f03dc1d04d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections