General

  • Target

    f529b0f45d5096f6018c102ed79e49f9611051bea2976b545fccc6e3214096df

  • Size

    1.9MB

  • MD5

    1cabd7c14c14bf8b55e91657ca255d04

  • SHA1

    8f3e86ec29c5b529d60bbda0f104a1a9407e0d45

  • SHA256

    f529b0f45d5096f6018c102ed79e49f9611051bea2976b545fccc6e3214096df

  • SHA512

    66a24ad22251c98995853cbb1c76cc60e1ac9266a321ce8abf925b0d63126a8d3754278af8a5874e1120a3edd9f3e4ca3abb462d6b164130fa20cb1742195b0e

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMKPFo4BqwDAG:RWWBib356utgpPFou

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f529b0f45d5096f6018c102ed79e49f9611051bea2976b545fccc6e3214096df
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections