General

  • Target

    207ef5cd396e8e0f01728fab31ba73d6dd1a96212fa46214018cc3b86960dcb7

  • Size

    1.3MB

  • MD5

    568f048a02ae8bca11a973dc98e347d5

  • SHA1

    79f6940500c4b3257e76da97780a6b41f063c2ce

  • SHA256

    207ef5cd396e8e0f01728fab31ba73d6dd1a96212fa46214018cc3b86960dcb7

  • SHA512

    febac7e4bf0874e75412834403eae725c47acd6d8e34395cca1e126d7d2e4b657ea4dcc5bf1bfc2e09de42fc144240e9811461fb2b22357438585ff2341e82db

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF672E55I6PFw12TJ1tmyNJeo55FgrI1y4AMnXhtChZ7NyP:ROdWCCi7/rahF3OioF5M+10E

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 207ef5cd396e8e0f01728fab31ba73d6dd1a96212fa46214018cc3b86960dcb7
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections