General

  • Target

    32d53ba03bd0f76cc867578c8e11750b2f7629a7c491a3a56e0b3e9f723f0058

  • Size

    1.4MB

  • MD5

    668e90dad5bb3d1fe42f30a0e52d832b

  • SHA1

    314df9159c137f771ab1d985093827e23e38d15c

  • SHA256

    32d53ba03bd0f76cc867578c8e11750b2f7629a7c491a3a56e0b3e9f723f0058

  • SHA512

    40ec2ca21af2a76f5a6d0fb553ee5b83bbe7ccce2ef12b72c5d30ab69468d776839ce5150939cbe3f6f6f9ecf201064dea3824ea6f5d4d47ff7c9ecf6d7d198b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cdeKVt+3z:knw9oUUEEDl37jcmWH8SKJhSQJVtQ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 32d53ba03bd0f76cc867578c8e11750b2f7629a7c491a3a56e0b3e9f723f0058
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections