General

  • Target

    5aeec13a9f373f77efd7547bc911e74c7a5ab371e6f4c2fd0665a974f25a8206

  • Size

    1.5MB

  • MD5

    2cfac4b42510b4ca6eba3275bb0979d8

  • SHA1

    315409dda586c648d096c6ef7474a46981c5c60c

  • SHA256

    5aeec13a9f373f77efd7547bc911e74c7a5ab371e6f4c2fd0665a974f25a8206

  • SHA512

    59ebb1168393d0ce2fdf73a24fd0c8b050fc5c3d0e7f0942dfc32e1aee0d4dc96c90f76976644ea107f828e368df6c1be1a0423655e957e5b106301ae48411ef

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWfmDzrmXYVZ120/rRJ:knw9oUUEEDl37jcq4QXD3P

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5aeec13a9f373f77efd7547bc911e74c7a5ab371e6f4c2fd0665a974f25a8206
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections