General

  • Target

    48da23e1036a6304d924f6fe36a4f7b501f7829622e6c73c991edda05af1280a

  • Size

    1.5MB

  • MD5

    1a942c6fcf4a07d1096ed97b01d08725

  • SHA1

    530616bb769e47759e61f28bc7f12990d69c1443

  • SHA256

    48da23e1036a6304d924f6fe36a4f7b501f7829622e6c73c991edda05af1280a

  • SHA512

    be13a6475d22cec3caaca621de7b6f4c08d92ada85552c0f5d0935c91e24651f862aef1ca367d8f0d5cfecafe76b614c97f99b4bab15298929a8bf33a15aad0c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgcdt9vvQNs9TJ0qFo5Sd73uGh:knw9oUUEEDl+xTMS8Tg3avLoUD

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48da23e1036a6304d924f6fe36a4f7b501f7829622e6c73c991edda05af1280a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections