General

  • Target

    1667142b52c2696a2a6042884f1df1e5099f8bfce13f512b5151f9f9e1a3b59c

  • Size

    1.3MB

  • MD5

    88344729cd8480b615747c48a2b64747

  • SHA1

    7f814fab73f627f87f870ee640560310c1f7eb00

  • SHA256

    1667142b52c2696a2a6042884f1df1e5099f8bfce13f512b5151f9f9e1a3b59c

  • SHA512

    fcc2c1fe50cba700f72b08e9c364d24fcc21b1a3375aa3af74b5bd24c7493e1ce492489fb739e6199627efac1a0c0dac274a9f3d604bc52fd84f8b88140cefe8

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaF2UdJwUkw3jv0FXbzQppu:ROdWCCi7/rahOY2UrwUveeI

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1667142b52c2696a2a6042884f1df1e5099f8bfce13f512b5151f9f9e1a3b59c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections