General

  • Target

    c6c9efbd5794d9052897d3b5dbe693df01f6801e53fc6a9c9e7fb9bd444b4886

  • Size

    1.5MB

  • MD5

    45a7fb4c4ebecbddc892ad2e06b8ee7a

  • SHA1

    af5cdbce54e753cb01cedae7c7be20196eb534d5

  • SHA256

    c6c9efbd5794d9052897d3b5dbe693df01f6801e53fc6a9c9e7fb9bd444b4886

  • SHA512

    089e104d96729fdc31c1cb76a8d6b33b7a336fbad4397348bb2678cd10ee5db4b18bd4154cc5b0706c30622c0fd1cb6cd34c623a6020a562953bd9dc0132dcba

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727Zvhwo01xDS1ud7fHxokbysEoMR9XshRmPbW1CTYMD:ROdWCCi7/rahFBIHF5mZTdxx

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c6c9efbd5794d9052897d3b5dbe693df01f6801e53fc6a9c9e7fb9bd444b4886
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections