General

  • Target

    ba1490538d536fb4564fe4a6250aa6d2f75209f7b6e2ef6d3cec14f1f314f230

  • Size

    1.8MB

  • MD5

    1ca276df5d9f9b5f2e5094fd1f873b9d

  • SHA1

    c1da2cbc4a0a9a72088d98aa85a575dfd0a17dfc

  • SHA256

    ba1490538d536fb4564fe4a6250aa6d2f75209f7b6e2ef6d3cec14f1f314f230

  • SHA512

    b7bb70011221d8a45fe092fdeeec98cb3f0bedbb7a50738d9d3ec2634ea776f7827f6203990139ff03687b65bb979d0ed449d0e5fdb9581114e9ba200267e08c

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wICbbnlD5E9p:oemTLkNdfE0pZrx

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ba1490538d536fb4564fe4a6250aa6d2f75209f7b6e2ef6d3cec14f1f314f230
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections