General

  • Target

    6475ced93d23f1580274d9a931f1048df29268e958db8b97e130f422af48a267

  • Size

    1.4MB

  • MD5

    d61eadfc8b96f042deb43b195665fda3

  • SHA1

    71be186e982bef3077c5e9061d93fe43a888433d

  • SHA256

    6475ced93d23f1580274d9a931f1048df29268e958db8b97e130f422af48a267

  • SHA512

    93b2a2eeffe3df613988e5e5889f973a9f8cf16422835b0e97efd73be4151e2f33f14eabc5c4326a19b804b3af28ac1feb39f39f67fc7092629f8da9b56f7949

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQIi2Wc/Bt1Fqu9g/+GElj:knw9oUUEEDl37jcmWH/xW/X18u9g/BW

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6475ced93d23f1580274d9a931f1048df29268e958db8b97e130f422af48a267
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections