General

  • Target

    59af53ae7019315dd4f6f3e532d832b860bf7ff12cc6a9b018a0b2510e66e3e0

  • Size

    1.7MB

  • MD5

    3ef2cb08b7f66cdcc42977ab5b16065a

  • SHA1

    bc8070c5207c48b936c30f1757e3d41aa3ddfd6a

  • SHA256

    59af53ae7019315dd4f6f3e532d832b860bf7ff12cc6a9b018a0b2510e66e3e0

  • SHA512

    72c692b8bf6a58b7779d75fc63bed080673b890400948029e2a5936562f4dd6d27f6323a0bd9f69a84f00ec53b9faf49c7f3c75dcab85350782dd57934e278b9

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFDnFelw+HT8V1NCgrrJEFVcuPFAY:ROdWCCi7/rahOYFocMRgmqBS

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 59af53ae7019315dd4f6f3e532d832b860bf7ff12cc6a9b018a0b2510e66e3e0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections