General

  • Target

    1be354d11bd90092348629177b5ad8de6a3e8df9e51576fd39c3c3b86bf4e41e

  • Size

    1.7MB

  • MD5

    7abf90359d5750b4557cce262fdee725

  • SHA1

    5cac5250f6d894e3e3c953ee9eb41a8902d3d2fc

  • SHA256

    1be354d11bd90092348629177b5ad8de6a3e8df9e51576fd39c3c3b86bf4e41e

  • SHA512

    50a1168ae664e0d3c4d001ab2d0a64fe680ab0dbc5e06e16126dfee0ad07312fc684a2ce46fa7d8a4467fb555658589888d4441c01252bb9dd8595eda0e3228b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTW0hm3+Aj7W5YTxf:knw9oUUEEDlGUJ8Y9c87Meh9xf

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1be354d11bd90092348629177b5ad8de6a3e8df9e51576fd39c3c3b86bf4e41e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections