Overview

overview

10

Static

static

10

2bc8cf3d01...82.exe

windows7-x64

10

2bc8cf3d01...82.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bc8cf3d01f19b0d73349b8a08e7f5dd2ef540268463604a363d7679147b3a82

  • Size

    1.6MB

  • MD5

    b504fcfb87ceeea3e5e3367dc3824728

  • SHA1

    198f8a8c3f8e419d0df36d56ade1e7f76dce3b98

  • SHA256

    2bc8cf3d01f19b0d73349b8a08e7f5dd2ef540268463604a363d7679147b3a82

  • SHA512

    193cb535bfc84e891b4b981cdeb72a2cfa50e60aba1519ce014d3a521d69c11c308c429fddb84f261795b6e47c2f6cb6e8f8a92fc98a7089798e3aac41a22587

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K2PzORNnkQLikuGw4:knw9oUUEEDl37jcqDrUS1pRiRK

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bc8cf3d01f19b0d73349b8a08e7f5dd2ef540268463604a363d7679147b3a82
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections