Overview

overview

10

Static

static

10

f5acd12b11...a1.exe

windows7-x64

10

f5acd12b11...a1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5acd12b115951aba2ef9d1f32c4571b6ed8e244e2c9550246921d537f27d7a1

  • Size

    1.3MB

  • MD5

    320870baddb878f84aef3cc07d09bfcf

  • SHA1

    e782be26ee42d9c325df7868584fd04d65d4dab0

  • SHA256

    f5acd12b115951aba2ef9d1f32c4571b6ed8e244e2c9550246921d537f27d7a1

  • SHA512

    f708f972ddea2f80572c91937f075d3862606d6d64e0e39ef8e183911155bcb60b18dd64be15e01c8bad3c4ac6fb6e624103893047754715c90eea0c7af6d0ea

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727P/Q50xJiYYIFddXpa2qVWhB6LlytTs5TTcAi/:ROdWCCi7/rahw5UP6QtRspc/

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f5acd12b115951aba2ef9d1f32c4571b6ed8e244e2c9550246921d537f27d7a1
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections