General

  • Target

    6ca3c8576db722fb28ec66373ec907f91db1af00d833a6acb39853872910c8d8

  • Size

    1.3MB

  • MD5

    2318750e1cca2b69380bfcba321c3d5a

  • SHA1

    367468e86997c9966caa649a041472ba7db4148c

  • SHA256

    6ca3c8576db722fb28ec66373ec907f91db1af00d833a6acb39853872910c8d8

  • SHA512

    d40fa056be0200c290fbe79031024d494ef62238ed8942e79cd9e49dec585fd28bc4a15dba77fdf6b019d884dd3534cb32689d1e1b069e7ac552d17b3106777d

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQ6thdqPicRWK9y8J6aj+1ae:ROdWCCi7/rahW/zFdDlhUKn8F+9

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ca3c8576db722fb28ec66373ec907f91db1af00d833a6acb39853872910c8d8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections