Overview

overview

10

Static

static

10

f474a27a80...63.exe

windows7-x64

10

f474a27a80...63.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f474a27a808c48e7bad9ceaac1390dc2cfd1e0ecc264f6f1b382d4c1be25d363

  • Size

    1.3MB

  • MD5

    d7d4c5fd0ecdc081faed6535aac411da

  • SHA1

    59db340dce5ca3556cb0f6f0305bf96e0aeebf92

  • SHA256

    f474a27a808c48e7bad9ceaac1390dc2cfd1e0ecc264f6f1b382d4c1be25d363

  • SHA512

    61acbf6793b528db49d4be0e5be854ad61c6b557aad7da3d2bfbe2032ff28118081ca783a01a453d195c582ad5940895778eb6c510387e6713fb9f4b57f38271

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTF8t81k5nqY4UO:knw9oUUEEDl37jcmWH/ApyO

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f474a27a808c48e7bad9ceaac1390dc2cfd1e0ecc264f6f1b382d4c1be25d363
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections