General

  • Target

    a0ec800ecd5b94bbc616e2e8087554d29b4c87c2a99305a7b3ac459295d7f413

  • Size

    2.0MB

  • MD5

    5f35cc6df9373e540053142d6e2fc1fb

  • SHA1

    901f73c1dbbf957b28374395f34fe04b8b2ea9ae

  • SHA256

    a0ec800ecd5b94bbc616e2e8087554d29b4c87c2a99305a7b3ac459295d7f413

  • SHA512

    e65e17be3b7b5e187540575f83a9f820f54b95d7d1beebf72907a4c39f52ad2944f7656bdd7c921939e124de2151f37113386dc8f923a1bbd55a301ec585a98c

  • SSDEEP

    49152:knw9oUUEEDlGUJ8Y9c87MQUnZTuwD2kpb3C:kQUEEjZ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a0ec800ecd5b94bbc616e2e8087554d29b4c87c2a99305a7b3ac459295d7f413
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections