General

  • Target

    1b4779076eeb3cebbf9315d39bcbd670ea546f0082e92b64ca810bb040e9bcd3

  • Size

    1.8MB

  • MD5

    4cd3eeca53f1571ddde0adbc2d0bdab7

  • SHA1

    00dcafb90f25f4bafe3873f97434aa47a8d94559

  • SHA256

    1b4779076eeb3cebbf9315d39bcbd670ea546f0082e92b64ca810bb040e9bcd3

  • SHA512

    865e26cce469399d8e981fe7db6686167cc4da2d24c72a6720e8921342b2b2c979e81935f4d2fc249623549bb9d1af8794ef6081867a7dc4cd60707202d5efcc

  • SSDEEP

    49152:ROdWCCi7/rahHxhOWenbffOldXeLA1cFrkk:RWWBibaa

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b4779076eeb3cebbf9315d39bcbd670ea546f0082e92b64ca810bb040e9bcd3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections