General

  • Target

    a9b2ac0e7ddaed421c40a02e9bc73f86857ff34cb91bf7dfe8c914fbc4239c2b

  • Size

    1.3MB

  • MD5

    414d9f32c839e08ec4b948d39be2df94

  • SHA1

    b51e56a1e29df7ef1c619bcb4b31cbca010f2fea

  • SHA256

    a9b2ac0e7ddaed421c40a02e9bc73f86857ff34cb91bf7dfe8c914fbc4239c2b

  • SHA512

    88f7e25d126bdee0f1de3ef8635778677f2c5f8aeabfcb276281bf894ee34162ce85cabf3868fbe77e13165a8708a860c9a7f49397135b293026c003a4ab1c78

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oFxyfmCc9CwOY+nwWb0+oREIQg:knw9oUUEEDl3aEUj9zz+GP2IZ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a9b2ac0e7ddaed421c40a02e9bc73f86857ff34cb91bf7dfe8c914fbc4239c2b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections