General

  • Target

    78a80cedbe8c1ecdba5d1e4c7812c8c1c3c7db85685ed28d8b1d4c560707f46f

  • Size

    1.8MB

  • MD5

    40e9c497a998d92e4e96c1b8d9aaec48

  • SHA1

    2bfb84a56e3bc29a7b75f77364a98dd2def47fe1

  • SHA256

    78a80cedbe8c1ecdba5d1e4c7812c8c1c3c7db85685ed28d8b1d4c560707f46f

  • SHA512

    a4d0d63c4c95d205f126495936375b2c594ed6c50bed720e183d4d566594bf448fcea26e16d017370254fedcd8fdfb3eae5d0d3b14125bd67dfa4dd1c4fb52a7

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCej06sSv8rcbQyfuYlMyt38u2rMG/b:knw9oUUEEDlGUrMjiYuaeb

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 78a80cedbe8c1ecdba5d1e4c7812c8c1c3c7db85685ed28d8b1d4c560707f46f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections