Overview

overview

10

Static

static

10

9ba50d72ef...3a.exe

windows7-x64

10

9ba50d72ef...3a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ba50d72ef6d2378b64fd09eff66672dc32d45c43f4ccf1c593a987081b8613a

  • Size

    1.5MB

  • MD5

    2fac6d49b1edd3ae4d15fc3c1edb6cba

  • SHA1

    4f28d6649640a55deb6603c7a1b162428523aa67

  • SHA256

    9ba50d72ef6d2378b64fd09eff66672dc32d45c43f4ccf1c593a987081b8613a

  • SHA512

    b3f3e8a76abe37fa6383268de462a751ac3dd2ae2388d325e46dd5002ff488f5ddfeb7da3f1e53ab9a4ebce9a8e70856a117edacd582bfc905835f23d5dc097c

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+A8Jh1AahLYdSl6HUgX6YDz:RWWBiba

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ba50d72ef6d2378b64fd09eff66672dc32d45c43f4ccf1c593a987081b8613a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections