General

  • Target

    c9640f09b982a291fdbe8257da67b76babeec0e27a4472daca0810a91b6d170b

  • Size

    1.8MB

  • MD5

    7895c1ddf5e0fb94f150ebe2ecd8524e

  • SHA1

    4453aaf7cf55570a032de9ec0e06f71d0dd1de62

  • SHA256

    c9640f09b982a291fdbe8257da67b76babeec0e27a4472daca0810a91b6d170b

  • SHA512

    a51eb92a809cc3dfb6f28c9eadc82492e77b56212f40d7733a08059baf8ac34887f6ba85e29f5302f957ade3f3927208de51bb9a980fc8dda0cfe14c92f10c91

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTXptRmKWXkO1t7XSXRBA7:RWWBibaE

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c9640f09b982a291fdbe8257da67b76babeec0e27a4472daca0810a91b6d170b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections