Overview

overview

10

Static

static

10

f1ffa85a98...56.exe

windows7-x64

10

f1ffa85a98...56.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1ffa85a9894b19823b0ca1a45bc52df9aae03943afde5672d9627766753e456

  • Size

    1.7MB

  • MD5

    da95b3ce056db696d4ebe731dcd0ff34

  • SHA1

    988a44f35a76bca452254532283c522a7708bbae

  • SHA256

    f1ffa85a9894b19823b0ca1a45bc52df9aae03943afde5672d9627766753e456

  • SHA512

    fc460fbec5628d2e9f12e4ce1b37d7815f8a23d7efd097e069598338cfb5850420b5913037a2372d51e1525a4e07c5a6bdc2dc065c3e3993b49b769a29638dc7

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCGiMQy0AVu8L9gQqXxLy1Iycx1SaTbuqFJF:knw9oUUEEDlGUrGiMt32BnFb

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f1ffa85a9894b19823b0ca1a45bc52df9aae03943afde5672d9627766753e456
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections