Overview

overview

10

Static

static

10

c1aa80efac...66.exe

windows7-x64

10

c1aa80efac...66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1aa80eface6c74f74875e953d4368f3f44e980ab77437171b553f75d5410a66

  • Size

    1.7MB

  • MD5

    2872f96e2829666c7decdbedbfef9fdc

  • SHA1

    9f4c5090ac2d004c6b82bce1d2ac46fc29a5b26d

  • SHA256

    c1aa80eface6c74f74875e953d4368f3f44e980ab77437171b553f75d5410a66

  • SHA512

    65e2827bdd9d75efbfa679b52f5bc1daf2ea61851a9f1ab83bc86257b13398cc58907f3c488b689f214843220c7079478d05b73ec6a50f798b97dbabf5f7e341

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMeb7FxUOqyGP:RWWBib356utg4

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c1aa80eface6c74f74875e953d4368f3f44e980ab77437171b553f75d5410a66
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections