General

  • Target

    c1ba52331a834a0f4e3f44d73d4c540a4561d463b62adac5bc177a8b76005279

  • Size

    3.2MB

  • MD5

    3b8b793a16f2a624ee007b804617cb73

  • SHA1

    6b6ce03926ccee43a684060c8769f6f72756774e

  • SHA256

    c1ba52331a834a0f4e3f44d73d4c540a4561d463b62adac5bc177a8b76005279

  • SHA512

    9205cf12f17278ff78955d3d9d66d3b4501ac3ab418aebf22e2468d16e6756f38db01feee704a8b5a1777fc3ebe34eff576b26e9f343839ad931af7f2ba7ed30

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40u:NFWPClFku

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1ba52331a834a0f4e3f44d73d4c540a4561d463b62adac5bc177a8b76005279
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections