General

  • Target

    36e1f7995e80c7094cf217727a9241a676b729038ede888981e38d92b503aafe

  • Size

    1.6MB

  • MD5

    9597df80f6a0849054e1723d1e356244

  • SHA1

    8980162cc4df568c7976f71a42210288e4d5f93d

  • SHA256

    36e1f7995e80c7094cf217727a9241a676b729038ede888981e38d92b503aafe

  • SHA512

    5e9aeb3bf7f8c229d8f88913ea7efef52f99bc65b3049c8147ae9e101a0a5c831e180c088c66e5632777b4bd68a657d904e8bbd0b2256d6595b7fe8a648c9d5d

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+KICdyyPo++UIUFlBaQVNK/JBRXHvhIIJ1lQqT:ROdWCCi7/rahHxJTFlQZAq8U

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 36e1f7995e80c7094cf217727a9241a676b729038ede888981e38d92b503aafe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections