General

  • Target

    8f183ef118bfd3e2b69523a9c6187a1aee64bc60b19883b898d55b9d336dab5e

  • Size

    1.5MB

  • MD5

    c767baff83ad528ea6a18755dc1a4f9e

  • SHA1

    5c80620aea3f1ac39cf0272f5141307ee288449a

  • SHA256

    8f183ef118bfd3e2b69523a9c6187a1aee64bc60b19883b898d55b9d336dab5e

  • SHA512

    ba425ac4a68766081f98d1648de8a18a28ffaced5fa9d0a38fdeb1d98ab2136ec55919d1b215e4dc0329e161ad5a8b773b2cd07c1faebd5b67c3d1f2826fe336

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oFxyfmCc9C7mRBf3sysD5TH:knw9oUUEEDl3aEUj93cyU57

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f183ef118bfd3e2b69523a9c6187a1aee64bc60b19883b898d55b9d336dab5e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections