Overview

overview

10

Static

static

10

4dd883d306...00.exe

windows7-x64

10

4dd883d306...00.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4dd883d3064358c9223758fe9970b3e1f4c7c949ff0909e9f13647ab4296e100

  • Size

    1.4MB

  • MD5

    f4f9f0447f36b2dff5b34bc3df392e0b

  • SHA1

    78aae132283aaef7fd1508d356c0ab7cc32544b5

  • SHA256

    4dd883d3064358c9223758fe9970b3e1f4c7c949ff0909e9f13647ab4296e100

  • SHA512

    45d1c17a68c9e521109e79965b923b5ac16effc6f84e0fc9cc987997a3873388de6cd0b4befdad16e25a820e569935f3f3397b1b3082e3857e6734e99d10eae4

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00caCFogCZtEo6rk:knw9oUUEEDl37jcmWH8SKJhSM3mEdk

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4dd883d3064358c9223758fe9970b3e1f4c7c949ff0909e9f13647ab4296e100
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections