General

  • Target

    5e4857a4966374818cf21fba60a877c301134b65c7813516fd009e94573ae6fb

  • Size

    823KB

  • MD5

    1d91dc2f6438ef65ff0da331bd8a2344

  • SHA1

    382c4284a3486d88567e7f03fd699c85beec218d

  • SHA256

    5e4857a4966374818cf21fba60a877c301134b65c7813516fd009e94573ae6fb

  • SHA512

    3fb1f73c87540e01d3152796dc273a91c85f7d1728888238a8f217b12201d7cd830e136647f2c3a39a85765ee3a068f4b39eff5473ab3259806b91a96e868da9

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC7FBeWr5mtY+:knw9oUUEEDlGU+1tB

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e4857a4966374818cf21fba60a877c301134b65c7813516fd009e94573ae6fb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections