Overview

overview

10

Static

static

10

2957708f7f...40.exe

windows7-x64

10

2957708f7f...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2957708f7f60f394ea3504b974107c4130d94f12e5c1c72d318700408bcd3a40

  • Size

    1.9MB

  • MD5

    2b997d2a2564c4e95a058ddf631a3b6f

  • SHA1

    7596dea72b4b24f08c1725fe0e5a7b9230385759

  • SHA256

    2957708f7f60f394ea3504b974107c4130d94f12e5c1c72d318700408bcd3a40

  • SHA512

    517466f8a403b2eeb79354185c779cf29b6d778a5b9025f7fdf747293cd53f419f5198b78b9ec2a94d581a5e2bb96b1bec7b153416672b2314d8296e3532f761

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7EdN4scYTKYNY4s9:knw9oUUEEDl37jcqMHdqsceYj

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2957708f7f60f394ea3504b974107c4130d94f12e5c1c72d318700408bcd3a40
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections