General

  • Target

    c465d66560c8c12886eb41bf60b9dbde4cb834d291c877a767a414f3543a9314

  • Size

    1.2MB

  • MD5

    13455f781068a96296eb7dbdb4aa3607

  • SHA1

    775a61f71f938abb2e1669e259917c1be8882865

  • SHA256

    c465d66560c8c12886eb41bf60b9dbde4cb834d291c877a767a414f3543a9314

  • SHA512

    8f54e26f494635078a4a15b8abf22874ef5fdfa12950d22dfcba4564a51d4d145542b3377eb06e9a79b4c7e189241bdc94fa398ab804b4122d7c9b0793a70a38

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF672E55I6PFw12TJ1tmyNJeo55TadLHYwU6l5ClSB1Var:ROdWCCi7/rahF3OioF5qd/Bu

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c465d66560c8c12886eb41bf60b9dbde4cb834d291c877a767a414f3543a9314
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections