General

  • Target

    cde22e8eedb4613b2525917c57ba5e35e8672abcbc45b062e1bd16c3155e68e5

  • Size

    1.8MB

  • MD5

    7ae39807f1089d313135e65762ecd16f

  • SHA1

    8eec2d36c5b2a8dfceb61de11dd2ad015682c23b

  • SHA256

    cde22e8eedb4613b2525917c57ba5e35e8672abcbc45b062e1bd16c3155e68e5

  • SHA512

    b121e9312c8bbec0480bc2c79f94f202e2ab99a8cc28bd9dcf355e92aa0fc45ba25bb6fd6cf7a84c23162fd59990aab7303db3fa3f5f8662b1132d93eb8f0fb6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBosWqf+C1Yxj/ipsyVfVCP3L5WG:knw9oUUEEDl37jcq4zW530Vp5DQ8+

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cde22e8eedb4613b2525917c57ba5e35e8672abcbc45b062e1bd16c3155e68e5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections