General

  • Target

    0535767d9f452088e7cef927a66320467f814889de4b4dac6647566d74e088a8

  • Size

    1.8MB

  • MD5

    cb31222a125bdfaa29fc07663564a8fe

  • SHA1

    231cc6b3b87767b56e71d7e72d70bf02b65e09f9

  • SHA256

    0535767d9f452088e7cef927a66320467f814889de4b4dac6647566d74e088a8

  • SHA512

    062593d091b4db6498e58cab0351988902844f75fb54acf1a798810add39f46ef64ef8c5b316016d6917073e2c39c5a66aeee3ad951957dc1c75cbc7c4093186

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsi51JrtGYcrj6gb2eMkc5kT1pFZ:ROdWCCi7/rahlqOdg/cyBB/k5UU6EPjj

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0535767d9f452088e7cef927a66320467f814889de4b4dac6647566d74e088a8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections