Overview

overview

10

Static

static

10

6c699fcd27...8f.exe

windows7-x64

10

6c699fcd27...8f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6c699fcd279a38e9c79273988ecbf27f034163b22cf9c2fcd7db12495690918f

  • Size

    1.3MB

  • MD5

    26f02bb5c2de0baf3ae7c8df159e501f

  • SHA1

    0af4827dd06d76453d396bb67900e393ffc9806e

  • SHA256

    6c699fcd279a38e9c79273988ecbf27f034163b22cf9c2fcd7db12495690918f

  • SHA512

    161aed2f1feaf65abe2c15efb4e6c1c12453a94d4f22a465cae4e30f85d504f5777dd0fa357f73518f824b75fba36e6f4b1110545053ee7fbe5c49761fd50cab

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cdeKVt2:knw9oUUEEDl37jcmWH8SKJhSQJVt2

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c699fcd279a38e9c79273988ecbf27f034163b22cf9c2fcd7db12495690918f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections