General

  • Target

    4ac28c7f913b4a9da01a803913fb4768074dcb8f63048440366487a4d8a85cb0

  • Size

    1.7MB

  • MD5

    1624bd4da44e0f20ee8a46e15b59cc46

  • SHA1

    12a4f3bd067f661e46d2d9009c4be0900c029c9c

  • SHA256

    4ac28c7f913b4a9da01a803913fb4768074dcb8f63048440366487a4d8a85cb0

  • SHA512

    63e83aeda9b571aee113d8453cb27984f0055c0588309504410f97ef07ddcbcaf74c447acc18ac6c18e594700ddff5516d328bcdbdc7a68986f6388565e19a66

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oF7u3hmxjfU3KXAnmwJThEz8tU/FVJoB:knw9oUUEEDl3aEUiRSW2j3eagu8xD

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ac28c7f913b4a9da01a803913fb4768074dcb8f63048440366487a4d8a85cb0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections