General

  • Target

    25ad5987ee552b645d32b10db29cd0cb196d734c79e657ab95a8ab68e8dda5ee

  • Size

    2.0MB

  • MD5

    1910ae221bc5a6820746e589f71a6ef7

  • SHA1

    5aedcc41c5a6632d0b6e8a46691062f3cc9269c7

  • SHA256

    25ad5987ee552b645d32b10db29cd0cb196d734c79e657ab95a8ab68e8dda5ee

  • SHA512

    6eb8e479f446405a7c7616da042bf4b1a58f65bbec14a8c4269690cb67ca7eb2d641364c1eee6bc8ddb925266c37fbe4121932e100f1c4b50a89adbeee6ff748

  • SSDEEP

    49152:knw9oUUEEDl37jcmWH/xbQJ6EzN2mQrNJlN:kQUEEU

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 25ad5987ee552b645d32b10db29cd0cb196d734c79e657ab95a8ab68e8dda5ee
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections