Overview

overview

10

Static

static

10

f1c6668ff9...a3.exe

windows7-x64

10

f1c6668ff9...a3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1c6668ff99b125451a0dd5d9572e8b84bb95955342364f8533c34e4e5628ea3

  • Size

    1.5MB

  • MD5

    8f1d6caaa4aee772c5e2ced25714f2ce

  • SHA1

    1e081405a2353a7d69aa8aa0ba4622306d6dfeea

  • SHA256

    f1c6668ff99b125451a0dd5d9572e8b84bb95955342364f8533c34e4e5628ea3

  • SHA512

    881c5bd3da54c3274c57c50c950a3d56496b1202b3cefce35cd0006bf9b75c0fb870c62537cf66743a2774437da0d2f0d6269f8fa5029eedf9a8de9b2d495be9

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727f8UhNnXIhz24Gtd8SLiCOaOZwfXKfAnkb2SaPrVxe:ROdWCCi7/rahUUvXjVTZLVOaOxdy+Ea

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f1c6668ff99b125451a0dd5d9572e8b84bb95955342364f8533c34e4e5628ea3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections