General

  • Target

    109a7f310eba1d9cde9d289fd8c55724390a39ade146c4d3d3ed7ba810e7d5bf

  • Size

    1.8MB

  • MD5

    d7d3bc302e3a847dc16481b430d9529f

  • SHA1

    e127262ee26be7f725739f5c8f8099d096e94cdf

  • SHA256

    109a7f310eba1d9cde9d289fd8c55724390a39ade146c4d3d3ed7ba810e7d5bf

  • SHA512

    d8e87a7a7b11f6adf1ea657ed3e4e5a80429a57c8e045ea64ed5bc094cfa754797d0b9ff078df66f92393f75be49e935ddf24d9ea9e7986e22a9b94f5b2479bb

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0L0+Eqq31vkMOexG4GOlwQf6zErfc80srt1X:knw9oUUEEDlOuJUJGFQfKErftt3aYT5

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 109a7f310eba1d9cde9d289fd8c55724390a39ade146c4d3d3ed7ba810e7d5bf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections