General

  • Target

    fdf4fa9871fd7b8a518d4a9ce4afa1d68a8aa8fc0f1e6e299dcf4744813113ec

  • Size

    1.8MB

  • MD5

    c46dbfd2392f764492d872bd0e76a08f

  • SHA1

    ab1df34f194569785de5384a2e60333009cec7cc

  • SHA256

    fdf4fa9871fd7b8a518d4a9ce4afa1d68a8aa8fc0f1e6e299dcf4744813113ec

  • SHA512

    dc26b78e08cb7235367a5aaea6611cdf2f82a8f1d021b70edf0fca3d844cdd4d41661cd8c60490fc7137b3f5748e5cf63327ad3d6a610f9dedac35dd00c623af

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwxOpyinKCB92ofc6qjw/DLVwUPJ+mqGjMDV:knw9oUUEEDlnCNGofbLVzM9Y6lELSv

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fdf4fa9871fd7b8a518d4a9ce4afa1d68a8aa8fc0f1e6e299dcf4744813113ec
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections