General

  • Target

    9e5a12eee86c9374431a2679979acb41204693a39d6da9f2489a8fe91e65abb9

  • Size

    1.6MB

  • MD5

    0cff73caf9cd77182edf1b916c5cd59c

  • SHA1

    48c74c4a9d3ab6e2fa9e4a398c12374a69afce26

  • SHA256

    9e5a12eee86c9374431a2679979acb41204693a39d6da9f2489a8fe91e65abb9

  • SHA512

    a79f7720a3fdefabe7b32d2e688e9325cf0b99ea8f7d7bb55d776a08a575b82be3b8611195a5cc1738ab5c190b4c739549f6809a75ceb80507f52594df49a606

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwBeeLyKddyDUKZfCf9ggU5eOPMMKTbcwIWtVZo:ROdWCCi7/rahFHKsUKC6PeOwctWu

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9e5a12eee86c9374431a2679979acb41204693a39d6da9f2489a8fe91e65abb9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections