General

  • Target

    28910dd0afdfac0c6c372f8a4fe715bd20479d66d976f667eeb15191781e8de6

  • Size

    1.7MB

  • MD5

    413021aaa11a3888d4e8cb9740d01514

  • SHA1

    098511ee01e28ad134b6841d5261cb5eeae000ce

  • SHA256

    28910dd0afdfac0c6c372f8a4fe715bd20479d66d976f667eeb15191781e8de6

  • SHA512

    27d8544d9879c484dbc9edefba207d7c1eacdb4f8afcd9e3ca51536ee7b0cdad87ec215f68c03691be8217fc7d691e984b8cf73bbea23e6495b3d95f046f61fd

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K2PzORNnkQLdT1/I8:knw9oUUEEDl37jcqDrUS1pRfoDQa0

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28910dd0afdfac0c6c372f8a4fe715bd20479d66d976f667eeb15191781e8de6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections