General

  • Target

    dc19c24ff531613be14e1fc2eed91f825914f66a1cf3d9a9fdb0e5275014d313

  • Size

    1.5MB

  • MD5

    7a782d355cd266723008381513aa63b1

  • SHA1

    a2c8b78d9667d1608a6314f899d68df5723e56a5

  • SHA256

    dc19c24ff531613be14e1fc2eed91f825914f66a1cf3d9a9fdb0e5275014d313

  • SHA512

    82ff703c452e08e3ef3077a090fef0594728896490b509f56a05d58e8acee2440242fa7aa68509e976a7828cc65f7ec54f60501f46a50058442ce0777c07db1c

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwoONE6phFrMiBsQVWGoPN9sMyE+fpEOjhxfHtc:ROdWCCi7/rahFD2P6QV8NqMyLEQ19NA

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dc19c24ff531613be14e1fc2eed91f825914f66a1cf3d9a9fdb0e5275014d313
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections