General

  • Target

    27ffc8162358154bfa2a26ef08568d925b93d6d9fd0f23a091cb1f3245759495

  • Size

    1.5MB

  • MD5

    500c101e110e370588425b54b1a47131

  • SHA1

    dd0836cabeea3e9a22cb5405e1cfcfce4402e891

  • SHA256

    27ffc8162358154bfa2a26ef08568d925b93d6d9fd0f23a091cb1f3245759495

  • SHA512

    8fbd8fa5a2a7b3ee7e2206bf41cb06eed628b5a677db3cfff67ba4b7a8954140d91005672bd146f0563a8dd947abbb2986d405a2b82cd1dc1d56d7cd9f66326c

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/QoZo6TOZmkTziDGZUIgRqne1LguLjyesC/F:ROdWCCi7/rahW/zaZT2DETeaIj5

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 27ffc8162358154bfa2a26ef08568d925b93d6d9fd0f23a091cb1f3245759495
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections