General

  • Target

    9bcf15e3218de89f5f012bf387aa2869f4d44baf3687ccedf0352aa714b337d2

  • Size

    1.6MB

  • MD5

    0ac4e9b6a3604cb538791715bcd7a397

  • SHA1

    aa3867f5f79a862fe1fdaadc2bdc0d9c3d0c1774

  • SHA256

    9bcf15e3218de89f5f012bf387aa2869f4d44baf3687ccedf0352aa714b337d2

  • SHA512

    a86db03232b2f07452ed82d8633367cd67c5ba7036f4c94357e356649c6f88d0c83ee74c0602db7b4145d9aab1aa8aecc651f392da03811deb68436dc406aaf7

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727P/Q50xJiYYIFddXpa2qVWhBilx7To305Ejiko9daQ:ROdWCCi7/rahw5UP6Qsx7UtmSgsJg

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9bcf15e3218de89f5f012bf387aa2869f4d44baf3687ccedf0352aa714b337d2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections