General

  • Target

    1709fe4425815b0dc7f1c8335f43cf1cf54a8881701672e75fcf2e43c0e11daf

  • Size

    1.5MB

  • MD5

    a38f8c579ff9cc2eb57b233ea1b9a7e9

  • SHA1

    9989e6b4588ad9b6b45ccede68b2ae6f563edb2f

  • SHA256

    1709fe4425815b0dc7f1c8335f43cf1cf54a8881701672e75fcf2e43c0e11daf

  • SHA512

    ad24ef7f4b2ea90dc34262328e4a3d27df9c01c71be0fcc494ed02769718e6d50a1e8eaf35cd6a5d89d90db6f0f204a7d286b1110b2fe41ec9460055e495db26

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOZ9ZReBCs1VcvGYcgo04aG2c/+8Xg0FWdgRCaMZJ:knw9oUUEEDlOlR1dqgPuca2J

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1709fe4425815b0dc7f1c8335f43cf1cf54a8881701672e75fcf2e43c0e11daf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections