General

  • Target

    6459c2350aba516cb3442a413d8c72be08538fff6921267333837562c3c8604d

  • Size

    1.6MB

  • MD5

    2d4cf385d21b4233b41629bbf4a63c94

  • SHA1

    2161aedc64becd958f7c8e05af2cd6eed364edec

  • SHA256

    6459c2350aba516cb3442a413d8c72be08538fff6921267333837562c3c8604d

  • SHA512

    ce7566aba9b2686128346c67af7fb4f4cac7006d74c7f1a815bcd4be6db71685a32fe1dbe7270e27850ad702569b8ed58149eac86dda6b4a96d1cf8aa18c1eff

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARvKYYtJh8DXmB4thd9qiYryzFi9FtgPTRk0aP:ROdWCCi7/raZ5aIwC+A8JhP7dyk0C

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6459c2350aba516cb3442a413d8c72be08538fff6921267333837562c3c8604d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections