General

  • Target

    d4c95f35b3c090817c226597497399f4d5c3e8afd73f8b2a76a8aaffda39eb3e

  • Size

    1.5MB

  • MD5

    2fb64205a2fcc71891ec1395e8393bc4

  • SHA1

    f48e259bbe7d10c5cdec92d5af55d20d1c7ea831

  • SHA256

    d4c95f35b3c090817c226597497399f4d5c3e8afd73f8b2a76a8aaffda39eb3e

  • SHA512

    6e4782707a18754cd404a7de485cfc04eff1bbfd3e22f29ce929f8e5f94d8eaecc7e4b89e191d2fc9eb1b8831a836efd65345e2112630aeaacc5f8306acedab5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0L0+EYPcfgV/4zuq/lw4244PNJ+S/QM:knw9oUUEEDlOuJvhV/yl14P9/7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d4c95f35b3c090817c226597497399f4d5c3e8afd73f8b2a76a8aaffda39eb3e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections