General

  • Target

    27143470647f3c1663db830e459ab7b393e36f6349d0cf6d54c4d0eed9848180

  • Size

    1.5MB

  • MD5

    99956c63f7f0f8b9589a695229a0153c

  • SHA1

    4909d92bcd7cc1c3a06b8ad36d2e35b39437cdde

  • SHA256

    27143470647f3c1663db830e459ab7b393e36f6349d0cf6d54c4d0eed9848180

  • SHA512

    813c878851b34817e6882001479508d6fc1959d63cb0588ebf5d388f1fcbe94269d79a3c980fca7cb87d8e35deba0d854f9def0c14f531a35fa416dd1ffe76ca

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwGpmbqD0CkG0L2tQZgGV0Bm2Ykt+VzuL:knw9oUUEEDlnJ2k2oj6tPtCzuL

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 27143470647f3c1663db830e459ab7b393e36f6349d0cf6d54c4d0eed9848180
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections