General

  • Target

    c3d55fa37952904cf91469375a50ebfef44f302f72d7f6b042c7fab7df79da26

  • Size

    1.9MB

  • MD5

    194481b059dd77d13b1aed3f1c51db34

  • SHA1

    3cda4785bc29867cc6b13b166bf183b57f7a6002

  • SHA256

    c3d55fa37952904cf91469375a50ebfef44f302f72d7f6b042c7fab7df79da26

  • SHA512

    1e5bbddfb217c8b3df6551be1f461fbf720aebe6e25dc3cacb75611d7230c0bd4ffd2a6c71e70088ba0386ac3075f83da6b362b00a4abb9579663491c19b16ec

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOn0MsmNo3PzVwxbV+e6J0uh60:knw9oUUEEDlGUh+hNnjRMVTF6QPn

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c3d55fa37952904cf91469375a50ebfef44f302f72d7f6b042c7fab7df79da26
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections