General

  • Target

    cd17eef806c49798f5d00ac82e64bb85ddba69168fe557c7df0a310a3577bf22

  • Size

    1.6MB

  • MD5

    7def9c3d9a19acfdc82628ea148b2219

  • SHA1

    98db9a20aa2dd7189a3f01299abdc30365650f47

  • SHA256

    cd17eef806c49798f5d00ac82e64bb85ddba69168fe557c7df0a310a3577bf22

  • SHA512

    d8ef491df6deb257b00a37429b958f5c5c45aec799e692d2403969a155fb9695f71ab69fd7332178744b6b3443e88eeddbb80730f6afef814f34fc3b99f2a8df

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwBeeLyKddyDUKZfCf9ggU5eOPMMKTbcwIWtVZK:ROdWCCi7/rahFHKsUKC6PeOwctWXdpY

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cd17eef806c49798f5d00ac82e64bb85ddba69168fe557c7df0a310a3577bf22
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections