General

  • Target

    3bda9a73e5a862b141f59f47af01253c448bc43093f0a8084e762d320f9d81fb

  • Size

    1.5MB

  • MD5

    1bfc3f351725f9126cffcdf5e45b4dfd

  • SHA1

    126797f65b2a4b865bc66d3e3f592196b53867e0

  • SHA256

    3bda9a73e5a862b141f59f47af01253c448bc43093f0a8084e762d320f9d81fb

  • SHA512

    8d04aefb107e793ca86b03a44c36bc4f28f48c6704b2b57a855e8fc357c72a1022ea274c3b6a27480487778423810039062a6d141df1347e9e5a031c7aa25254

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1W/yXK09PK89hHq4CYLom6OO9DwdVnKmwmQ:ROdWCCi7/rahwNGyX687xWHMTnd3E7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bda9a73e5a862b141f59f47af01253c448bc43093f0a8084e762d320f9d81fb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections