General

  • Target

    ea8fa0b1647940fe9cb5451936d29c703ab9a0dd608fb0bd9c740b113af17ddf

  • Size

    1.7MB

  • MD5

    67e89fb75499a9e1a96c5e7e17c9c5d1

  • SHA1

    03c40a4c009023939ac40db0c8e452115d9f5115

  • SHA256

    ea8fa0b1647940fe9cb5451936d29c703ab9a0dd608fb0bd9c740b113af17ddf

  • SHA512

    1366a08a5139dead634bc5967e7cf42ad052d81eeb055adcb777e7154021f1457ed1829b8ca934f4520abae78f67882df237e8488415c7abe2f81820e2ad0812

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOosT9sQEbjAzcs5:knw9oUUEEDlGUh+hNosT9uMV5

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ea8fa0b1647940fe9cb5451936d29c703ab9a0dd608fb0bd9c740b113af17ddf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections