Overview

overview

10

Static

static

10

4fdf6e1543...c8.exe

windows7-x64

10

4fdf6e1543...c8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4fdf6e15435c55b76657017b6599a1dee487aeac77c96abde4dc9aadc3002ec8

  • Size

    1.8MB

  • MD5

    39aca7f9f6c75ca7423123ba564d8f56

  • SHA1

    420516173f5fa48757f7c14ce39a8a97bd7cf822

  • SHA256

    4fdf6e15435c55b76657017b6599a1dee487aeac77c96abde4dc9aadc3002ec8

  • SHA512

    e3d11f937609ce8bc2a2ad8d8da32fa2bc7f9a1d1c02867368e8b368db1220aab183c3390255cf575b723a4c15945d90e1937f5d575dcac8c323bbd416336981

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCGiMQy0AVu8L9gQqXxLy1Iycx1SaTbuqFJ2/:knw9oUUEEDlGUrGiMt32BnFcmVy

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4fdf6e15435c55b76657017b6599a1dee487aeac77c96abde4dc9aadc3002ec8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections