General

  • Target

    d6fa2308f21359e15848b3bee0c1ce0cce54cef13d2d70ae2221fdeca2b9a876

  • Size

    1.3MB

  • MD5

    017e3e2232904980f9723c19de0c051c

  • SHA1

    1b8f0f922530f405a77b332e424faf310d2e73d0

  • SHA256

    d6fa2308f21359e15848b3bee0c1ce0cce54cef13d2d70ae2221fdeca2b9a876

  • SHA512

    de40eae42d60b7f800d2cf5bc843de2786d269b21028620713f0c764d6c2cd07bc6d27639663c3370fd5d0b96df4efd333994d2018d575b55c8bce06e6bafd5c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWfmDzrmXYVZ12zN:knw9oUUEEDl37jcq4QXD+

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d6fa2308f21359e15848b3bee0c1ce0cce54cef13d2d70ae2221fdeca2b9a876
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections