General

  • Target

    505a2630208685163938e93b040bdd4c83a69c2bbf845da356e0ab1f7268a176

  • Size

    1.5MB

  • MD5

    13a7ff7ee637bb3afb2fda3a5c12ab4b

  • SHA1

    a98bd2be82d5c0a72772af7cf67258c17aeb6e00

  • SHA256

    505a2630208685163938e93b040bdd4c83a69c2bbf845da356e0ab1f7268a176

  • SHA512

    5b968e5f65f782544501eeecef368852e1f0a13d070f18d598ef3f1d97f755e1ee8e3a887782430f544b94d84a5ae3e4967c3e96e4e1f493410bd3a7672d7022

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oF7u3hmxjfU3KXAnmwJThEz8tU/FVJ/f:knw9oUUEEDl3aEUiRSW2j3/f

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 505a2630208685163938e93b040bdd4c83a69c2bbf845da356e0ab1f7268a176
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections