General

  • Target

    def7c8560bebe2448d30722e3bde7fd9ac208320e2e0786f223a22370f3f2388

  • Size

    1.2MB

  • MD5

    1f230a45e0cc151c86129f267097610f

  • SHA1

    4d3e70053a23f6f0a2c7607759adde7d1b41d152

  • SHA256

    def7c8560bebe2448d30722e3bde7fd9ac208320e2e0786f223a22370f3f2388

  • SHA512

    c9f643ee2c063b01226f0b2d97c698d2683d44ca831e38056d942f13e6bcea1f7ed0d3ba07d8231b760c62a9f76781f0bff53ab29d1e09fd2ba5a0de50e53ada

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8bodJj8RN7:knw9oUUEEDlOuJPHjk7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • def7c8560bebe2448d30722e3bde7fd9ac208320e2e0786f223a22370f3f2388
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections