General

  • Target

    ed24b86c12b07d24ac7c1c7930aa7ba586a86bb8cb05b5a94b0bf28ecb75c53c

  • Size

    1.5MB

  • MD5

    f4a42b4f6bb32d2f3b7c038d7e27d543

  • SHA1

    0e26ae34d10ee25d13e0635539ca7a7b47a27dec

  • SHA256

    ed24b86c12b07d24ac7c1c7930aa7ba586a86bb8cb05b5a94b0bf28ecb75c53c

  • SHA512

    de9ab1cf88d000922ff49c196991c6cf5084fca76d0791aa718f98191ea0575aca78796143f61f30afe159bb78804a8676827a771f9431c3062de3a8a4ad2004

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFDnFelw+HT8V1NCgrW8cybQdASmg:ROdWCCi7/rahOYFB9bbANOk7gg7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ed24b86c12b07d24ac7c1c7930aa7ba586a86bb8cb05b5a94b0bf28ecb75c53c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections