General

  • Target

    b4202881959fd51c729e62ba092d0c40ec704f7accf80b6e270e011b6f9bae86

  • Size

    1.7MB

  • MD5

    37802ded878d633047dc0dc43a9bb909

  • SHA1

    769855959ab4144010220c5bcb9eb4a3cd0949a2

  • SHA256

    b4202881959fd51c729e62ba092d0c40ec704f7accf80b6e270e011b6f9bae86

  • SHA512

    c1d065ea04a99c2b2ad389ee4011e580632149044dd5a6b35f09c5936f0953c33543dc50ce6e90e5fcff97e239234349fa2e11f010203dfdef52c3226ded4278

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8Bl6rM1u471mNtcgiTiBLCXAj++fy:ROdWCCi7/rahwNUMuikLCiJCF+QXf

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b4202881959fd51c729e62ba092d0c40ec704f7accf80b6e270e011b6f9bae86
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections