Overview

overview

10

Static

static

10

b4d563ada6...66.exe

windows7-x64

10

b4d563ada6...66.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4d563ada61060c55f2510539d7b93e67e139f2c77eea88d7495d9dce7da5966

  • Size

    1.6MB

  • MD5

    a3d7c79d4c58e7777d620ea756346950

  • SHA1

    35971418a118407c342ca0a4b5cab58d6184e12d

  • SHA256

    b4d563ada61060c55f2510539d7b93e67e139f2c77eea88d7495d9dce7da5966

  • SHA512

    b3386627c5e08ef98ff26d8777aaf6dc07206f7f1a4454e45fc5f947b249ee153d21887c4a0f536f58b6e32c82799282b813f8847d777a4cd68ba5174d972d2e

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwoONE6phFrMiBsQVWGoPN9sMyE+fpEOjhxfHtd:ROdWCCi7/rahFD2P6QV8NqMyLEQ1dt9

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b4d563ada61060c55f2510539d7b93e67e139f2c77eea88d7495d9dce7da5966
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections