General

  • Target

    d087f05a2d7123d5d21fe320b6a14710e6dce5f6a4be297d5c6a331e8f7b93c1

  • Size

    1.5MB

  • MD5

    037eb80048d1f735387731a4552e0aae

  • SHA1

    6b057a9d8086cca0b7f87fa17584e3b1688bd57e

  • SHA256

    d087f05a2d7123d5d21fe320b6a14710e6dce5f6a4be297d5c6a331e8f7b93c1

  • SHA512

    66bec5a838b4318a53143c08e838fe4cddf17f642b67c603b3b4d6a8326fc5f66c8dc9d83956c4d876612f45a3278e4600b57f59a42b5474ce8493de9f329c1b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K2PzORNnkQLdMTgpw:knw9oUUEEDl37jcqDrUS1pRE

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d087f05a2d7123d5d21fe320b6a14710e6dce5f6a4be297d5c6a331e8f7b93c1
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections