General

  • Target

    58b49c5ddb248258a405a7a37b0cd43eaed705bfe18725692129e74a07a8a40c

  • Size

    1.7MB

  • MD5

    55961517db08d41ea8a235799fae95d8

  • SHA1

    66f06312cbb82d0c2d7d3eb2a0d9f3c8af7a58da

  • SHA256

    58b49c5ddb248258a405a7a37b0cd43eaed705bfe18725692129e74a07a8a40c

  • SHA512

    e13e284c636920d363e820649cb9609d681fd564cd5f84c5563b4b4d3130832853d381d9358be90cc657d87828a50be158484bdfb44c7a8d3461734b5bab5e56

  • SSDEEP

    24576:RVIl/WDGCi7/qkat62wT83PzKgAm0PyFLb/PwCumXck14JoN1ZIXvsi3hN6qA:ROdWCCi7/ra+GvAnCumyuZiGP

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 58b49c5ddb248258a405a7a37b0cd43eaed705bfe18725692129e74a07a8a40c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections