General

  • Target

    516b3b711799d0ad384fbbb94eaf1a48f79c093e37c7fba7f82173ec9a9c35b8

  • Size

    1.9MB

  • MD5

    16bb2f2bb6ddc1567b8017badc38633d

  • SHA1

    45ae71cd899120fadf32bbace6b3f371b8a79544

  • SHA256

    516b3b711799d0ad384fbbb94eaf1a48f79c093e37c7fba7f82173ec9a9c35b8

  • SHA512

    f9902e22c68e63c583ccb64be1fe93180e40b04548ab306b2f30b65158e4e81477d687e2dfa5770c76fe2751772b0aa64b5904a837d31154473f3778565f1491

  • SSDEEP

    49152:knw9oUUEEDl37jcmWH/xbbFN/NM5hAf2rtuXF3:kQUEE4

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 516b3b711799d0ad384fbbb94eaf1a48f79c093e37c7fba7f82173ec9a9c35b8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections