General

  • Target

    613aeb68098a7ea9daf422503bd1b9f31dc3747109bfb91242d49c1582d9f532

  • Size

    1.7MB

  • MD5

    f338ac7345e49796338053ca895c7257

  • SHA1

    f4a0705b1fbfab7e660663101e023d63330890d2

  • SHA256

    613aeb68098a7ea9daf422503bd1b9f31dc3747109bfb91242d49c1582d9f532

  • SHA512

    7b6aa1b3e9298ffbd0e0abdf1b1a0e712f59b77e5304976cde84b881d8126fc323aef678a25d7279d69de7eb52520680d32fab98095ab415300f8a8460f237e4

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9xyCyt0RCciNHV2mZuDcoA:knw9oUUEEDlnDwq6Sd0R7qV2Y9iU

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 613aeb68098a7ea9daf422503bd1b9f31dc3747109bfb91242d49c1582d9f532
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections