General

  • Target

    01d95d9b327f474e64e6db8051a07d5aac66f39a2741d9c7cab2721da33f1c02

  • Size

    1.4MB

  • MD5

    3b5f1638f0e7dcce32b27ffdb6ece2d0

  • SHA1

    d51aa3fa7d0764acfa37bb5e0d204effed9ab457

  • SHA256

    01d95d9b327f474e64e6db8051a07d5aac66f39a2741d9c7cab2721da33f1c02

  • SHA512

    6f52d8d3a4b4709b99ebdb6058dc4ab417122884e045af6fa256d1804a41f0dd8e5a70ef867ee5bb0a446d3446104d379529ec95e6974565569bf67deb7203ee

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+Kwen8Z2IX7UULTdNRKuY/jEnJPK9:ROdWCCi7/rahHxwxN8/gnJC9

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01d95d9b327f474e64e6db8051a07d5aac66f39a2741d9c7cab2721da33f1c02
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections