General

  • Target

    564acd4eea0af280e44bd1eb2982aade3d4ce1aa80a5c4ceb9e4183bc877f519

  • Size

    1.5MB

  • MD5

    8c3fee2272c2ac54f047977d03efea11

  • SHA1

    920788f9e48c0058d4866c90abefa120b96a2c98

  • SHA256

    564acd4eea0af280e44bd1eb2982aade3d4ce1aa80a5c4ceb9e4183bc877f519

  • SHA512

    7d84c7a30bd08328215df8b612e53d0e3d1f0eba147e20d6a4f4ef4eb7023f2950e50580403a635758e6a29d30beea1626ac8a0549fce12eb343caead552703a

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsi0JT/kWi5lkqCSsWj:ROdWCCi7/rahlqOdgWqeWj

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 564acd4eea0af280e44bd1eb2982aade3d4ce1aa80a5c4ceb9e4183bc877f519
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections