Overview

overview

10

Static

static

10

fd49b2eb29...09.exe

windows7-x64

10

fd49b2eb29...09.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd49b2eb29f0d91fcd2f54e4517d1007d5ff3d4a5cc62a78b2e66448456d3b09

  • Size

    1.9MB

  • MD5

    ea7a79a7487e6436132c10e3fa485b0f

  • SHA1

    a067ba10d5b826b8f6be6ddfc1b00e29629bf63d

  • SHA256

    fd49b2eb29f0d91fcd2f54e4517d1007d5ff3d4a5cc62a78b2e66448456d3b09

  • SHA512

    4b17439d1e3375d4d59e775cd5b37a532a9ecbf9b4bd1a6cd4d9f4387af38da8a93a224f5b6f2fa744a2b4c65e79f30aa9dbb1aa1f6a39e79b7e32bffd42dab3

  • SSDEEP

    49152:knw9oUUEEDl37jcqa7V/gZVj+dtMpQfI0MDJ:kQUEEx

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd49b2eb29f0d91fcd2f54e4517d1007d5ff3d4a5cc62a78b2e66448456d3b09
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections