General

  • Target

    5bdb9e944df86ac7ca5655fe6c12ffe64a7a6097776566defd3a734ec906daa0

  • Size

    1.5MB

  • MD5

    d3261bd0f4f28f82f588f3c916f2b539

  • SHA1

    c0508f83b07ddf043e8e69f6951636d0077238b2

  • SHA256

    5bdb9e944df86ac7ca5655fe6c12ffe64a7a6097776566defd3a734ec906daa0

  • SHA512

    764d500d6d60ace4c1554b90b565e228742911ea3cba48ac36d3fbcc0d1ccb9f5284599e5b27b612ebc767188f974809e42a838dc611a157dbf7927a232e9982

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mILdsOlf91EsN6aLwBHe+1BhuBrRady:ROdWCCi7/raWMm+ZQaLwBXhub

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bdb9e944df86ac7ca5655fe6c12ffe64a7a6097776566defd3a734ec906daa0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections