General

  • Target

    8e4fdbd766237e11f07ad2c9244376728616af559b676e4112e7f4d55da2d155

  • Size

    1.6MB

  • MD5

    0a472e4bdd8d288dd5217e6de55b6df1

  • SHA1

    2e62652dbe7b5d14e48adc67eb5f0b8a72b3a6b4

  • SHA256

    8e4fdbd766237e11f07ad2c9244376728616af559b676e4112e7f4d55da2d155

  • SHA512

    4a47ed24f158dca4605d64f433b8a23ab5bbb18a484a2fc32c5b9a58a26d01ba806f09b8a6e3ca14a5e25dd820cd5ba2f0c8c02d48c9058d594e3e33a011a4b9

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9xyCyt0RCciNHV2mZuDcoY:knw9oUUEEDlnDwq6Sd0R7qV2Y9i8

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e4fdbd766237e11f07ad2c9244376728616af559b676e4112e7f4d55da2d155
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections