Overview

overview

10

Static

static

10

c08d0a9aaf...4a.exe

windows7-x64

10

c08d0a9aaf...4a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c08d0a9aaf229f39b74362f7c857c279293e1db82d9771a5255f4b350aa9ec4a

  • Size

    1.8MB

  • MD5

    91ff2c57a823c6d362fa5ccd5e3fb443

  • SHA1

    28221b915f71011cdb0c8d4191afb367ea831400

  • SHA256

    c08d0a9aaf229f39b74362f7c857c279293e1db82d9771a5255f4b350aa9ec4a

  • SHA512

    c972543bdf2803f555f4c32af8b2be2f9d021fc446cb80476c5ff4fd94cdf16c3942f85d33ce10d37e8d7f8fbcf31433e803cf2796ec125b90d57c266091d79d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCej06sSv8rcbQyfuYlMyt38u2rMG/Ru:knw9oUUEEDlGUrMjiYuaeQ

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c08d0a9aaf229f39b74362f7c857c279293e1db82d9771a5255f4b350aa9ec4a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections