General

  • Target

    26097e7d4bed8cb2f7bc7e4f3ca66bfe2f9eccd891fe866a54faa23c7451d009

  • Size

    1.5MB

  • MD5

    299f8fd7e5989c6b6abbeba7cf0aed92

  • SHA1

    c08550ffa10bb57daf31973b023ae1ce7e1c254b

  • SHA256

    26097e7d4bed8cb2f7bc7e4f3ca66bfe2f9eccd891fe866a54faa23c7451d009

  • SHA512

    a08ae1864def9e2813f21538cf038e3e32a7b2ef1c08f2b2b56ccdf51789191d400e3e92551d5ba83bb51a331f9448bfc3dc2cd29fc0d30f54038f7d09b3075c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWQ59U4Wyjxan7fE7:knw9oUUEEDl37jcq4QJ7tl7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 26097e7d4bed8cb2f7bc7e4f3ca66bfe2f9eccd891fe866a54faa23c7451d009
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections