General

  • Target

    b9caef9ab4dc4dff835b2468770e246364cdfd77bc200cb791020c07fe0c0410

  • Size

    1.6MB

  • MD5

    971808e6d0eb8a990a4b6f2daf67fc58

  • SHA1

    25d5fe810d4ac20d8087014e82ada5b38fc2a649

  • SHA256

    b9caef9ab4dc4dff835b2468770e246364cdfd77bc200cb791020c07fe0c0410

  • SHA512

    440b485d1ec7be27c0d3fb60e0a4a362078d54fbc9dfbf5d3bbfea70963604297a0fddaf697ab5f796fae086b1368a0751de7b6828f9580c598c2ebaa3f4784f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOoRIKuaxzm01z8TYFLwVBz6fHhjrCgP3d9bVuKDQ2:knw9oUUEEDlOxhWCOBjOQdnu0/7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b9caef9ab4dc4dff835b2468770e246364cdfd77bc200cb791020c07fe0c0410
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections