General

  • Target

    e0ef8b454f5611c976a56ff72476059bd85dd872ec4e2f001fe98a4c96c3b700

  • Size

    1.8MB

  • MD5

    144fe7c49ce9fd21e161dd8dda8eb8af

  • SHA1

    13688672e982845590ab04afec8ee44a940b0319

  • SHA256

    e0ef8b454f5611c976a56ff72476059bd85dd872ec4e2f001fe98a4c96c3b700

  • SHA512

    7f39c958d3e0054c961d70b8a0b5c074669e0e6036a7fa866c3baf9e4cb18e64e5260dc1ff18a4318a44062c47b5dee17442c10677b97e1d37b4432c0f220174

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejHeOuU4GrTsO20J1nycsW5mJgNP9Gfpc/P:knw9oUUEEDlGUrMsWfb1/y0

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e0ef8b454f5611c976a56ff72476059bd85dd872ec4e2f001fe98a4c96c3b700
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections