General

  • Target

    5ee8d5a3f4aec650335e05aa414d5a1a2cf8e8c0722ee3c47cc2a6d679125206

  • Size

    1.7MB

  • MD5

    88303abb749a41b26af2d42372002dcc

  • SHA1

    0275c4066e6f1be4b61021994c6524bf4cfeb40a

  • SHA256

    5ee8d5a3f4aec650335e05aa414d5a1a2cf8e8c0722ee3c47cc2a6d679125206

  • SHA512

    2042a274065efb5351d123d5213601ffb95c41b691da8beb4af487c25e80c5c349eb06fbafd67bc3ebd0bf35b89c2ae8da15fc37a3be93ceb4b91c8d9708a308

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTZLVOaOxdy+EmuV5:RWWBiba5

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ee8d5a3f4aec650335e05aa414d5a1a2cf8e8c0722ee3c47cc2a6d679125206
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections