Overview

overview

10

Static

static

10

2a8393e6a9...50.exe

windows7-x64

10

2a8393e6a9...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2a8393e6a99a99f48e2e5ee0d917b1d7d1de4cc6be3f084a448dc4b271c5d250

  • Size

    1.9MB

  • MD5

    bb11b12c655e77f5d1575cf8f2ec2ce8

  • SHA1

    0231958774dd08731337908cdcee2a8e203a419a

  • SHA256

    2a8393e6a99a99f48e2e5ee0d917b1d7d1de4cc6be3f084a448dc4b271c5d250

  • SHA512

    7a8e92b3a42771784f1a0a219681c000723bb5ddd522a42cdb2f69c68976d3f2c01a5c84f205c5d35bf08bb10b67b53d558ecfff2939648718c51b21f3e9a36c

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMKPFoTzDt2Jga9c/:RWWBib356utgpPFod

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a8393e6a99a99f48e2e5ee0d917b1d7d1de4cc6be3f084a448dc4b271c5d250
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections