General

  • Target

    3d9ad708bf4f5845c162462a6ac9d01cd5bb4177878accec122f55fe2e236eca

  • Size

    1.5MB

  • MD5

    ccace6db02afc529a5b7aef912179c51

  • SHA1

    4d1981a63521470bd0582b4cf34b78be7325cec6

  • SHA256

    3d9ad708bf4f5845c162462a6ac9d01cd5bb4177878accec122f55fe2e236eca

  • SHA512

    deb79c70a0faadeebffaf1811f2f55d5af21292782014c62ba3d39e0d89f2afdf3f37d9187edde8c7dda22e46751cfb65a38cd1a197e1dd0ecd451c6e43533bf

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727f8UhNnXIhz24Gtd8SLiCOaOZwfXKfAnkb2SaPrVxp:ROdWCCi7/rahUUvXjVTZLVOaOxdy+El

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d9ad708bf4f5845c162462a6ac9d01cd5bb4177878accec122f55fe2e236eca
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections