General

  • Target

    bdc6e216d037bd84e30485ce09c07bd12d9e6b91232641ba74f36a8a5e70bd0d

  • Size

    1.9MB

  • MD5

    5777a02a01b05844cab721c70f2881c8

  • SHA1

    f432b0e1ba510a187a8b367e92ab65878fabb30b

  • SHA256

    bdc6e216d037bd84e30485ce09c07bd12d9e6b91232641ba74f36a8a5e70bd0d

  • SHA512

    7c44aff3145b1cde87ef04587b9d8530fade65c0fa5e6afb654ee6ee9f602ad5ed84404892b737ab1d2e73416ba8497fca6dec3e39117cfba5465dd4b5f5a270

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBosWqf+C1Yxj/ipsyVfVCP3L5WD:knw9oUUEEDl37jcq4zW530Vp5DDAJT4

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bdc6e216d037bd84e30485ce09c07bd12d9e6b91232641ba74f36a8a5e70bd0d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections