General

  • Target

    f9bae8b1d948dbf5ebd4bd18e022f7624e824dc8422c9c1eb4d896d0f4b48397

  • Size

    2.0MB

  • MD5

    331186475d288b758c07463cd8fcb778

  • SHA1

    5d8d424a9aaf0d5464bdf339d6927fdb313176c6

  • SHA256

    f9bae8b1d948dbf5ebd4bd18e022f7624e824dc8422c9c1eb4d896d0f4b48397

  • SHA512

    949dbb5abbb877dad02682d634a2ab98e381d98eb45d6280fc29dc38488b31293c39d447bea353ecbd1b697ee87d44024deadfe8ae7f376d5cbe3b89dfebe8b2

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIaHs1PTma87NYI:BemTLkNdfE0pZrS

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f9bae8b1d948dbf5ebd4bd18e022f7624e824dc8422c9c1eb4d896d0f4b48397
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections