Overview

overview

10

Static

static

10

20b6f0a9dd...4a.exe

windows7-x64

10

20b6f0a9dd...4a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    20b6f0a9dd84bcec124a6c3a692cb82c9a0aa332560f8fa27890432fa09d454a

  • Size

    1.8MB

  • MD5

    031b3d997d1e89038a2408e56997fe85

  • SHA1

    6731bc56ee973100190d673bb8db0a2f6c1275f3

  • SHA256

    20b6f0a9dd84bcec124a6c3a692cb82c9a0aa332560f8fa27890432fa09d454a

  • SHA512

    387004fcb81d489404d1a00a311200ff23f2a6a971fdc8f550d8d512e68863c2f274ed905e355d53e6460469eb0aba53e60d985be16de94f81c8d36480b7eff2

  • SSDEEP

    49152:ROdWCCi7/rahHxhOWenbffOldXeLA1cFrkn:RWWBibal

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 20b6f0a9dd84bcec124a6c3a692cb82c9a0aa332560f8fa27890432fa09d454a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections