General

  • Target

    e5c1ab56ec491d3c08feaace2a5a308798c141e2f9b0a7dceee957683e4e509f

  • Size

    1.4MB

  • MD5

    62ecf08460b3d1040a40acbda71da1e6

  • SHA1

    6a23caaccf265662dddf5045ae3e6441cb78906d

  • SHA256

    e5c1ab56ec491d3c08feaace2a5a308798c141e2f9b0a7dceee957683e4e509f

  • SHA512

    b8b2f436cb7ff8b2c65843d3b191c9622c1c42136b2dfec026294025005c9c4151c25b3e53d334e3fb43bd3484aad80244066cbce7710c9b689b0d611a627701

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+KICdyyPo++UIUFlBaNC2L1SFO5oumpxt:ROdWCCi7/rahHxJTFlt2wa8F

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e5c1ab56ec491d3c08feaace2a5a308798c141e2f9b0a7dceee957683e4e509f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections