General

  • Target

    f9a3379580b3abf1f6ab6c1e10a3d97493ffa5d2dbaf4d548a071bfad16e0098

  • Size

    2.5MB

  • MD5

    613f9d469724dfde641316663b0fd945

  • SHA1

    231f12cfa7941adfbdb2ef25843c1cdf36e382b3

  • SHA256

    f9a3379580b3abf1f6ab6c1e10a3d97493ffa5d2dbaf4d548a071bfad16e0098

  • SHA512

    4007ab444c981427496913bd138a3e2fdcca08f0ad96a22c30df28594422811dca5fa1964100c93b6403026e011f10d7754e79c6e9e71393bfacc7ad7d4dd2c9

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzeaEUiRJwzy:N0GnJMOWPClFdx6e0EALKWVTffZiPAcY

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f9a3379580b3abf1f6ab6c1e10a3d97493ffa5d2dbaf4d548a071bfad16e0098
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections