General

  • Target

    6506f425d87429be09948a23f976f4a232624467db2fd47d88f31e950324546c

  • Size

    1.5MB

  • MD5

    4020a352e2b56d4b1df5749d4bdd1a3f

  • SHA1

    770424653dff140760d0a979bcd08bed04bdc138

  • SHA256

    6506f425d87429be09948a23f976f4a232624467db2fd47d88f31e950324546c

  • SHA512

    79e7ab5d429e2c93d654bea6cc487672244c6135707a2c9653de6ac755b84574ec11d98938822a18cfb4ce363639c3c0785b3f6dd28fc29f90db801b7e598e73

  • SSDEEP

    49152:ROdWCCi7/ra+Gv4rzq6c2HzZ+3/gijyP0E7E:RWWBibk

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6506f425d87429be09948a23f976f4a232624467db2fd47d88f31e950324546c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections