General

  • Target

    1c29dd34defdfa9c4873e9bb8ef661a115a530e80b3c081bf8836b30dd00a6a7

  • Size

    1.1MB

  • MD5

    f8bcef322757437fa0cd8b2f46d0eaae

  • SHA1

    54a61184722a5a3f051abea415c5f9cb43ca97d3

  • SHA256

    1c29dd34defdfa9c4873e9bb8ef661a115a530e80b3c081bf8836b30dd00a6a7

  • SHA512

    33f207eb7971e0a7ed91a7bd0bfb9c26b231a3281597cde632d851db354fa84f9c50935fc19b0d40f4eafdaa26e6f57da1c10fe926c9b754401303da51d1cb10

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwzVsJxIE66bi:knw9oUUEEDlnzWIEHbi

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c29dd34defdfa9c4873e9bb8ef661a115a530e80b3c081bf8836b30dd00a6a7
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections