General

  • Target

    c6fca28e63228eae8cec52e9ee62be4d963f10445c14816e16c0e7b410130ec5

  • Size

    3.0MB

  • MD5

    15d941b11e12b8d3f54c499d34bc0e2a

  • SHA1

    8bce11b2a247ff5b242456c010272e6d9347d5b9

  • SHA256

    c6fca28e63228eae8cec52e9ee62be4d963f10445c14816e16c0e7b410130ec5

  • SHA512

    bb0f17884ecab59b40f6481e859d507b427335508a947c9421cff3128f73334e12e654e610b91b634a60136a891cee5de5e5efbdddad64c3ea88ae7a54639c25

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9ctYVk68Nv:N0GnJMOWPClFdx6e0EALKWVTffZiPAc7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6fca28e63228eae8cec52e9ee62be4d963f10445c14816e16c0e7b410130ec5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections