General

  • Target

    16678db71127ef9854f0d87c7e2a30a7bb66584596a0552d698033232299c7e2

  • Size

    1.2MB

  • MD5

    06af475af791fb11c2030312f73c4c61

  • SHA1

    c07c3dd06311a5ed56712b663e7dcade6612593d

  • SHA256

    16678db71127ef9854f0d87c7e2a30a7bb66584596a0552d698033232299c7e2

  • SHA512

    bd066d40811797c6222443d16c28d3e5e8de06da6bcdc27d2b7ed36c8fe8ba0930f95cd278a1a071834e9befc12444f22f60215aeaa36b2e38f2c1c4aab9137b

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQ6thdqPicRWK9y8Q1Gt:ROdWCCi7/rahW/zFdDlhUKn8Q1q

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 16678db71127ef9854f0d87c7e2a30a7bb66584596a0552d698033232299c7e2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections