General

  • Target

    6ae5b6ecbd1088ae12c5e80f43ea1c27bfcbff59528839bd0dc38994f97e83b5

  • Size

    1.6MB

  • MD5

    5ee1493c97ad0d9a3a1754423c65e567

  • SHA1

    5f11136d135cb725963c98683c47e02267f09692

  • SHA256

    6ae5b6ecbd1088ae12c5e80f43ea1c27bfcbff59528839bd0dc38994f97e83b5

  • SHA512

    89bb174bd8ea7d4a336119c5ef124245bf9948a932cc981236664dc746025cc42b0e26028803ada45006808efb26616d523294b6c70958c2ed26996c0ee9f60c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9xyCyt0RCciNHV2mZuDcoY:knw9oUUEEDlnDwq6Sd0R7qV2Y9i0

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ae5b6ecbd1088ae12c5e80f43ea1c27bfcbff59528839bd0dc38994f97e83b5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections