General

  • Target

    5ad8dd26941f680c2cfc0c1ad490e29c43a7ad402b7099f5becbe1b4a291cbdc

  • Size

    1.8MB

  • MD5

    0ab6240cb0504b28ef218213b37e690b

  • SHA1

    1b1c234d751bc866508a190b86dbea10758c6458

  • SHA256

    5ad8dd26941f680c2cfc0c1ad490e29c43a7ad402b7099f5becbe1b4a291cbdc

  • SHA512

    280dc5e36975571c24c1ef9835c8d445e626f8c48ca7a92eeeb2178e4f23c0780b2a43a69cfec4ed32bcba229fee155d8e949fb6c8d0364460e768796e8f57f8

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMeb7FxUOqyG/zQ:RWWBib356utgB

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ad8dd26941f680c2cfc0c1ad490e29c43a7ad402b7099f5becbe1b4a291cbdc
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections