Overview

overview

10

Static

static

10

c36fba979f...55.exe

windows7-x64

10

c36fba979f...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c36fba979f8898bcd6ef21b8c8cf5133bc26e14e0ed88a89b5184c9610255755

  • Size

    1.7MB

  • MD5

    7768b1b205473adf9d552493a837c529

  • SHA1

    178595a3a07fbdb0a43c89d57bf2d331d46ab7aa

  • SHA256

    c36fba979f8898bcd6ef21b8c8cf5133bc26e14e0ed88a89b5184c9610255755

  • SHA512

    6d44ae7c5d0fe01e5789b6ed18dcd17c5d997c8b9f151337222c963a6445bcba08666d2276ae7dca1abd77ae867b7060ea04dc4727ff025f4be60003331e9a34

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTRdf5k5p8iKCo2q+pS:RWWBibah

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c36fba979f8898bcd6ef21b8c8cf5133bc26e14e0ed88a89b5184c9610255755
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections