General

  • Target

    70e1a0a0420c5e9fe2e5c0ea818a2b60504bf9d7408b3d3d5c70bc8f6d4d36b7

  • Size

    1.7MB

  • MD5

    9d5e6c23a6e69c6a841f33232a428a52

  • SHA1

    788fc91fb63fff9ad90d5e02946d2441a2922192

  • SHA256

    70e1a0a0420c5e9fe2e5c0ea818a2b60504bf9d7408b3d3d5c70bc8f6d4d36b7

  • SHA512

    774e95793d6e1596b53f5cf17ad42703f008e4414a28c8d0a0127798a76f11069049c171d2c37d67f60d57afc37eea2de706bf20af1f34b745b7a9552660de6d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0RS/o8MSiyHvOJI093l2fINLHK62q8dFn8u3:knw9oUUEEDlOuJeof7H3NcqPP6

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 70e1a0a0420c5e9fe2e5c0ea818a2b60504bf9d7408b3d3d5c70bc8f6d4d36b7
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections