General

  • Target

    23612c1a25b275f55d7d4282afb013367cb7771639d1669280f94a3abfb43cb6

  • Size

    1.6MB

  • MD5

    d0b7599a05cc4f5f02886a71300c47d3

  • SHA1

    4c867d1055c44f287565f88c46561206ea9f49b5

  • SHA256

    23612c1a25b275f55d7d4282afb013367cb7771639d1669280f94a3abfb43cb6

  • SHA512

    f7edfd2658dbd45d6500d6f70073e06dc018277769ecd5f916e737682520e934d9af149c4b211faece871226114235f2d4f5fd146b6199f2086958a63652800a

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8Bl6rM1k4QMQbDA4i1wjlJmAbBm7e:ROdWCCi7/rahwNUMJH4KiRb84MfQ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 23612c1a25b275f55d7d4282afb013367cb7771639d1669280f94a3abfb43cb6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections