General

  • Target

    ffc4eddb1ac43f9ce08c9f18f841216ecc32c00aaef81f8a8ba3395c01ef5e4b

  • Size

    1.9MB

  • MD5

    9fbebc5eb1de924d65db1fcabd7fb4ed

  • SHA1

    10d8ae3771ddf4b33779086e317d61fc8647b4aa

  • SHA256

    ffc4eddb1ac43f9ce08c9f18f841216ecc32c00aaef81f8a8ba3395c01ef5e4b

  • SHA512

    2dbb05c579633520f805f2e323921811a53ffad41e6ec2e2718ca119ead9bb66e8fe76894777789657b7b97f4945c30619d77a1f3b3fbafcd76b003b5baaf7da

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlW6m3pPu6Cc+gujcae7paq+ABXJCxDXI/km6yCgJTk:knw9oUUEEDlM261ugJraD

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ffc4eddb1ac43f9ce08c9f18f841216ecc32c00aaef81f8a8ba3395c01ef5e4b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections