General

  • Target

    64c491b27ed8d5446659a098beb7da921f34c29eb3afe0ee7248bbd3ba70c807

  • Size

    1.4MB

  • MD5

    23378ed58d8734930ef8bdafdb00a8dd

  • SHA1

    acb055504f4d50bbe919279a8d50ce8ff99712ae

  • SHA256

    64c491b27ed8d5446659a098beb7da921f34c29eb3afe0ee7248bbd3ba70c807

  • SHA512

    3c71b28b99152463f70574ddb64ecfebeb298d7f31b6fc67bdf23105bbf538cafd6b1191bc0310312f949f014d99c9eae1f17cf02f6a81b88cacb4832324973f

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARvKYYtJh8DXmB4thd9qiYryd3KHYtO:ROdWCCi7/raZ5aIwC+A8JhP703Q

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 64c491b27ed8d5446659a098beb7da921f34c29eb3afe0ee7248bbd3ba70c807
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections