General

  • Target

    2666a16fbc353813fa663be80159992d727a53c046a9bf419a27a221fde2ddee

  • Size

    1.9MB

  • MD5

    3d72733d2ed855dd4b31044e615a3b96

  • SHA1

    5a4334678dc1bbb8bcfbcf7f3e7285e3854d1fad

  • SHA256

    2666a16fbc353813fa663be80159992d727a53c046a9bf419a27a221fde2ddee

  • SHA512

    647cc309b9310305b586ea03db52cd72fe25cf495339b32781494209a31c00d5ff4558204f837ec7be4a0e92d4cb6dbef0e86295f856ce77fea5ec4b331eae95

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEd2TcFEvJ2NXTVG:RWWBib356utgw

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2666a16fbc353813fa663be80159992d727a53c046a9bf419a27a221fde2ddee
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections