General

  • Target

    efb023bc2795473fb4cc024421108ec4298ea4790a6624c9dbbacad590d0c9eb

  • Size

    1.9MB

  • MD5

    f06fe4548a73e637e6ff9433bf943072

  • SHA1

    ba7234d77b310886f07ee6f3923bca6ec3969251

  • SHA256

    efb023bc2795473fb4cc024421108ec4298ea4790a6624c9dbbacad590d0c9eb

  • SHA512

    cddb2b2d858d86026baa07b7481a3755ce7ee712cbe8b80b7c366576ad1eb110775b5f0e8bbffd78c0d448a96c3bee26d4d58d87ae6d9dc9c951f3d9b6f87ef6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlW6m3pPu6Cc+gujcae7paq+ABXJCxDXI/km6yCgJT+:knw9oUUEEDlM261ugJm

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • efb023bc2795473fb4cc024421108ec4298ea4790a6624c9dbbacad590d0c9eb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections