General

  • Target

    fa5acc48688622e52193d3da5b23be48a10265043c6b6cf389c6e02ddddacd95

  • Size

    1.4MB

  • MD5

    5fa103c73e3262f5d4ba0eb408ddfb1f

  • SHA1

    741ae39be06a6aedf5fc7d85aeea069ecffd5d34

  • SHA256

    fa5acc48688622e52193d3da5b23be48a10265043c6b6cf389c6e02ddddacd95

  • SHA512

    9ac41a57babf0c533d5ac333914f3d6551ebbbb7ab698c8d6a90a22cb3abb5a5754e4e7bf7b87b20cbef79c2f7f87280481f04d29ded1d7cd90a926043a69a16

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWfmDzrmXYVZ12UzNV:knw9oUUEEDl37jcq4QXD7zH

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa5acc48688622e52193d3da5b23be48a10265043c6b6cf389c6e02ddddacd95
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections