General

  • Target

    cb807d1a5240cb92d9ae37931131dbbb767a17cf9d17ecbfcc80abf1fd3ae536

  • Size

    2.5MB

  • MD5

    380f4d770c60b64e3a344f6de6bed335

  • SHA1

    2f21d8534667192b67d73480e148c73365077727

  • SHA256

    cb807d1a5240cb92d9ae37931131dbbb767a17cf9d17ecbfcc80abf1fd3ae536

  • SHA512

    8ce44c43afa0abb7d7ae6d44e67de6ee3dd67a248bd9fc2437c604d5a63fee8e13772391d4965ca6f33161fdc4fd7c74a590896685e79c91ad8410c5f8043064

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrG4wWx4p:N0GnJMOWPClFdx6e0EALKWVTffZiPAcl

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb807d1a5240cb92d9ae37931131dbbb767a17cf9d17ecbfcc80abf1fd3ae536
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections