Overview

overview

10

Static

static

10

6edffeb58f...48.exe

windows7-x64

10

6edffeb58f...48.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6edffeb58fa07bd3769cb97777e3cdb1653c62269bc3a0f64d910931b08e7a48

  • Size

    1.4MB

  • MD5

    bf0fcd0a3ff7b47d5b48f0fa1c42574a

  • SHA1

    58000b34a4c7db2f9d0131bdc8a3d5c257cf98e8

  • SHA256

    6edffeb58fa07bd3769cb97777e3cdb1653c62269bc3a0f64d910931b08e7a48

  • SHA512

    404ec72fd40f40eac83830ee93f9016e72035565fe72695173c3f540868de3f34b76d067a91eb53421aa0474e959aee5ad825c061d72a38eb05773d999ea1751

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1vAq3GupoFqian/LF:knw9oUUEEDl37jcq4nPgFWuS8

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6edffeb58fa07bd3769cb97777e3cdb1653c62269bc3a0f64d910931b08e7a48
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections