General

  • Target

    a16e0b863b6472caed2218c1da018205314d32f0d30a9592bf0b6f6be7d99d7e

  • Size

    1.8MB

  • MD5

    0332e7d149ff53474b514e1606e7cf67

  • SHA1

    c0fbff33fc32651678d3a0cb87e205c1d1da472a

  • SHA256

    a16e0b863b6472caed2218c1da018205314d32f0d30a9592bf0b6f6be7d99d7e

  • SHA512

    a81b41ce514dc157ba90083107d8ea1367cc3f815c2d39596cd1493d72057071b2d81d095634b868fb5f91ec00d40cb6e5e9c3bf2133aa4c110169388ef639f3

  • SSDEEP

    49152:ROdWCCi7/rahOYilJ51sr8FNI9rxzTpqi8:RWWBibae

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a16e0b863b6472caed2218c1da018205314d32f0d30a9592bf0b6f6be7d99d7e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections