General

  • Target

    0ceb858a7c12ba4dd1db68634afc5f724d1d3a49e9880602ffa7d74dfe6ff843

  • Size

    3.2MB

  • MD5

    30f8d08f27b57cc5827a32983b2d622f

  • SHA1

    7bb67e29d4be51e17123b509a7eecf42d4a80962

  • SHA256

    0ceb858a7c12ba4dd1db68634afc5f724d1d3a49e9880602ffa7d74dfe6ff843

  • SHA512

    31b87414c49fc23962f39b18d42962a56810597a00f6415282d8a49fcda62b93b30d75c651d2e604530aa840135006cfe73ec35b899a2111bf5a83ba4e6b5339

  • SSDEEP

    98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4i:wFWPClFS

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ceb858a7c12ba4dd1db68634afc5f724d1d3a49e9880602ffa7d74dfe6ff843
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections