General

  • Target

    1e22f100161d4344e48b17d1a5ede2ae593501ad2bf4aecfde9c9c60b1e55124

  • Size

    1.5MB

  • MD5

    521f85abd9a72e730c66776b81d6e025

  • SHA1

    b0cd71b65d81697e29cb46dc2a30bbdccbfe0a76

  • SHA256

    1e22f100161d4344e48b17d1a5ede2ae593501ad2bf4aecfde9c9c60b1e55124

  • SHA512

    f80d8ef936de964ec4a92961665ea82b008b6dea9f588e062d52dfd77c107f1ec8de4fa37f234e1565bfba6b687cee46b8deddeb6ae54d80893a52e2b9200809

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+KICdyyPo++UIUFlBaNC2LKqHtl2BZquYPJ8:ROdWCCi7/rahHxJTFlt2O+2BWS

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e22f100161d4344e48b17d1a5ede2ae593501ad2bf4aecfde9c9c60b1e55124
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections