Overview

overview

10

Static

static

10

5301c654bf...ff.exe

windows7-x64

10

5301c654bf...ff.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5301c654bf4f843df22ce96210f372d2ce435774243f970943e355c21a87ddff

  • Size

    1.9MB

  • MD5

    481f158a1609a4935bbaf4c0fc8be134

  • SHA1

    3cf988d6977456a31d3823cf4d66dff11b135f3a

  • SHA256

    5301c654bf4f843df22ce96210f372d2ce435774243f970943e355c21a87ddff

  • SHA512

    627b8c77e0b7f414333bcd058318a7ec6ec936a0c7cc67eeb3d63a84c7cd58a3f3b224ff29cd90ad91b0bfa5e62761dc7794fa9a1992e71ec54b618cdedf1d7e

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEd2KUgK/WWXjfXBE9:RWWBib356utg1

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5301c654bf4f843df22ce96210f372d2ce435774243f970943e355c21a87ddff
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections