Overview

overview

10

Static

static

10

db070c7e7f...25.exe

windows7-x64

10

db070c7e7f...25.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    db070c7e7f9e1ea3073afd1a720051886b1a97eee38909e79ac97b2c0a13d225

  • Size

    1.5MB

  • MD5

    0ffa6b531466937d6329d8cd8130201c

  • SHA1

    7823ff65fd1cb6bdbaf16e737f11d7d83c822e05

  • SHA256

    db070c7e7f9e1ea3073afd1a720051886b1a97eee38909e79ac97b2c0a13d225

  • SHA512

    0d8369fa84b15eddc1efe9086670073d2e1930331c74f1e2316335c0d9996b96e489318ffe5fa0e2d64fcd13866e3cc25c90d64810a375df97ab897b070a7b85

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oF7u3hmxjfU3KXAnmwJThEz8tU/FVJ/e:knw9oUUEEDl3aEUiRSW2j3/7i

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db070c7e7f9e1ea3073afd1a720051886b1a97eee38909e79ac97b2c0a13d225
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections