Overview

overview

10

Static

static

10

98edda3a1a...30.exe

windows7-x64

10

98edda3a1a...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    98edda3a1a2558a557db44defb2fb2ff8b076ca61dc4a4462628c4d74bb62f30

  • Size

    1.9MB

  • MD5

    4fce447432bb641c5f7e20ab8d5c58c2

  • SHA1

    46e48670fc652dd0381648f72074f4c19091cbfb

  • SHA256

    98edda3a1a2558a557db44defb2fb2ff8b076ca61dc4a4462628c4d74bb62f30

  • SHA512

    ddfba224fd10798d7c363ab0700774ac728c10db9982961fdd761c028c9790868e4a8caf95238d4c11b9e4df64691d07da21af6e274cb47311f732253771b33b

  • SSDEEP

    49152:knw9oUUEEDlOh516Q+oxxcdBDog6FhPwz:kQUEED

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 98edda3a1a2558a557db44defb2fb2ff8b076ca61dc4a4462628c4d74bb62f30
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections