General

  • Target

    e0221f22aebefbb964cf5ada50dfac21e1554dc29ca8923a6f71dc2aeb733f33

  • Size

    1.5MB

  • MD5

    b362008c4984c21a303c53fa77eb55d8

  • SHA1

    29c1ca05e3875d0a699654e211ca09a189e40ccd

  • SHA256

    e0221f22aebefbb964cf5ada50dfac21e1554dc29ca8923a6f71dc2aeb733f33

  • SHA512

    0b20e5adf2810c59d117723a330180a73feb887c15f497ce40bcef0e86e7dab04590898f8ee4d2b083b45ded319219ccbe765334876b84db2150c84a3826bb1a

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/QoZo6TOZmkTziDGZUIgRqne1LguLjyes6:ROdWCCi7/rahW/zaZT2DETeaIj1

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e0221f22aebefbb964cf5ada50dfac21e1554dc29ca8923a6f71dc2aeb733f33
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections