General

  • Target

    a8670c2db90e7fac8b7dda64977976204f0cbaed43208545ec97e421b387aec7

  • Size

    1.3MB

  • MD5

    808288214f82b697ca15247183faea92

  • SHA1

    75f3ebc677d73d0b117f51c7b34e9655c5dd37b2

  • SHA256

    a8670c2db90e7fac8b7dda64977976204f0cbaed43208545ec97e421b387aec7

  • SHA512

    da602e9032667b85a3278d82cbbe73c834a322bad156134d7016e395932f9db7b493345bc718b5b5f0b3014c4272fca29529624c404a94a7f2d894788568936d

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwJWe9pY4p9XvOjeUlV/oPVHsv4Tu4K:ROdWCCi7/rahoyS6SHbFK

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a8670c2db90e7fac8b7dda64977976204f0cbaed43208545ec97e421b387aec7
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections