General

  • Target

    7e8b11d3b6a1e3ba246b1c49ee6bb198e05aa4eedd106dafc30325c55006d6eb

  • Size

    1.4MB

  • MD5

    2849e01717f036d73cd2f6874776b3ca

  • SHA1

    39543042df22e8dbf1678b2edb605b38ef11328d

  • SHA256

    7e8b11d3b6a1e3ba246b1c49ee6bb198e05aa4eedd106dafc30325c55006d6eb

  • SHA512

    87c7481ad1bd4049ced1076c04f5d1397501dfab2d34dcc9701546a2ff3420e7a6af5be4462195a579a4ad0769259a8ac09318e6fef1186ca1086927e3e15294

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cdeKVtHL:knw9oUUEEDl37jcmWH8SKJhSQJVtr

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e8b11d3b6a1e3ba246b1c49ee6bb198e05aa4eedd106dafc30325c55006d6eb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections