Overview

overview

10

Static

static

10

131ecb4f2e...8a.exe

windows7-x64

10

131ecb4f2e...8a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    131ecb4f2e228cb58f18d6516421fa3fec4cbfcf435b026171fae118ed3ccd8a

  • Size

    1.3MB

  • MD5

    ad3fcbb6daa94f97a0586041a0622838

  • SHA1

    564b586eb2a1d2895388114527d78a4b369a2416

  • SHA256

    131ecb4f2e228cb58f18d6516421fa3fec4cbfcf435b026171fae118ed3ccd8a

  • SHA512

    52b7daf57a623b73b8682ca48af59a9b8db182b628d4cbd55d250013f52558389a698d93d0b00f8013ee2bf099692016074c2e9300e0608792d40df4b0c95c54

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTF8t1SS3Ahn:knw9oUUEEDl37jcmWH/CN

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 131ecb4f2e228cb58f18d6516421fa3fec4cbfcf435b026171fae118ed3ccd8a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections