General

  • Target

    6f9bf6bccdc0621a46c408f9a2904a0f3ccb5676a4c498fe4d85e71c0fa11866

  • Size

    1.8MB

  • MD5

    c2870dd45bfd110d11248255ce7d0be1

  • SHA1

    0cf4d1f6730ba10f257bf0c903689a03423800df

  • SHA256

    6f9bf6bccdc0621a46c408f9a2904a0f3ccb5676a4c498fe4d85e71c0fa11866

  • SHA512

    71d8690278d58076c52ef465424a6bf616b84c9fb6c906ee2bde6837a22d0791795940f95aeb109e08da3378bee79939f8c0df3bbd74a5e50f238c4ad1a93b9d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBosWqf+C1Yxj/ipsyVfVCP3L5Wr:knw9oUUEEDl37jcq4zW530Vp5DQ8T

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f9bf6bccdc0621a46c408f9a2904a0f3ccb5676a4c498fe4d85e71c0fa11866
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections