General

  • Target

    3286be9f0aeed5c099009da13bc5a1412e67729293395ee6025785261ef4ca10

  • Size

    1.5MB

  • MD5

    a11ac9245d037332bd26a082f9069868

  • SHA1

    c95cbe9dbb055f94b9594e23f193fc6f5f2bb92d

  • SHA256

    3286be9f0aeed5c099009da13bc5a1412e67729293395ee6025785261ef4ca10

  • SHA512

    eb7f626142492689d882fc770a2b75361f74f1197a9bd1bec36bb9982fc0751f73160a18659f1ec6183939d23a9bc1a301e739ac96cf2929a08cd4eb5ddc2888

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwd+t56p6aGu4DORZwTkhj0LQ0oK2ggP+P58:knw9oUUEEDlnd+XRqJZwTKjnpP08

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3286be9f0aeed5c099009da13bc5a1412e67729293395ee6025785261ef4ca10
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections