General

  • Target

    68124e586eb1b48a63ce5ebbb89a69b01a5516b6c9cd0bab0b0229e4880436bb

  • Size

    1.8MB

  • MD5

    3440bee32c7d1894b8d8c2070292eab8

  • SHA1

    0b8a9535bd82e2fba2c2527d78f97aa3a67cc7f4

  • SHA256

    68124e586eb1b48a63ce5ebbb89a69b01a5516b6c9cd0bab0b0229e4880436bb

  • SHA512

    9b615cd358596d67e19b4aa6e81dbc9c94fd982f109643a2578fa3dff0d8a813b1407fd7bd2e8dbb212cbf3a4e81c58857b9ded4266c700c9d3523e3aa4d5b29

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mILdsOlf91EsN6aLwBHe+1BhuBrRadv+ftRCpXoy:ROdWCCi7/raWMm+ZQaLwBXhu3C9b5

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 68124e586eb1b48a63ce5ebbb89a69b01a5516b6c9cd0bab0b0229e4880436bb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections