General

  • Target

    374fb20306232005d24c125d6b80f5bbd51df1bddfd06bdc65de0b6c4aa79a87

  • Size

    1.6MB

  • MD5

    cf2278a33f933120e7180843bab87f10

  • SHA1

    23266fca17172b1b61689b030ff8463c27ccb535

  • SHA256

    374fb20306232005d24c125d6b80f5bbd51df1bddfd06bdc65de0b6c4aa79a87

  • SHA512

    2f9eac63d725360baa139c1e44f497f68a1c25201a3228fca87351049571f7cc607ac5bef9689bb609ce5ce14c3fd56e9cab2875821cb71b72baf79062cfb613

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/QotQssIbtJsG7oJfSL5/UGarp35jgYE8FAx:ROdWCCi7/rahW/TQItb52CY0p0pEj

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 374fb20306232005d24c125d6b80f5bbd51df1bddfd06bdc65de0b6c4aa79a87
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections