General

  • Target

    87de6589d4c82cda0fb1cce3ad3a12c311db344e3639b39ccf9796c8ef0f5e9f

  • Size

    1.1MB

  • MD5

    666eec72282349ebbe8909fc32d8a1f9

  • SHA1

    1b49938aff1e81b568d37fbd6f3626df65bdc737

  • SHA256

    87de6589d4c82cda0fb1cce3ad3a12c311db344e3639b39ccf9796c8ef0f5e9f

  • SHA512

    ea76213a400e3fe0197bfa2ffe66ed23bbad73504c0281bae6c6599a671d533197d4e8660e2fa69c5477b895d98a6da941ed27c923aa9fd6c76d4acff0f73b95

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQ6thdqPicRWr:ROdWCCi7/rahW/zFdDlhUKJ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 87de6589d4c82cda0fb1cce3ad3a12c311db344e3639b39ccf9796c8ef0f5e9f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections