General

  • Target

    b24dbdd1eb88a9783ad2a2391dd5c20c8bb809c8271063e1b39d06458fce3152

  • Size

    368KB

  • MD5

    efa7d567514695d3a661b2ae91d1f91d

  • SHA1

    2ce6559bc08b8fbd8c5ed3a941eaa9f410c4c1a5

  • SHA256

    b24dbdd1eb88a9783ad2a2391dd5c20c8bb809c8271063e1b39d06458fce3152

  • SHA512

    8b93e86b52b3da96bb958d870ad13193d2d7842216d7359f96b02609c351b3a49a76f0b797e6c7e3219d749baa8bf1c58561dbc57503505506e81be7656044cf

  • SSDEEP

    6144:IBZe8q68XYww3S6CoUEEDpidAp8JHLwi3r8Ag2+lGTqd+xatCpX2+zrJFzjP25j9:ISe8XYl3vWD8xCi7KZoqkatMLrJF2TF

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b24dbdd1eb88a9783ad2a2391dd5c20c8bb809c8271063e1b39d06458fce3152
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections