General

  • Target

    6a7c3f21e52c9dfc032db2652913a35e3cfc3772adbd8b3db628f95abcecbe2f

  • Size

    1.2MB

  • MD5

    4bfecb4044ffd4f0dec4af4964efa45d

  • SHA1

    29e5dd7d227850ae76d9a88bf8d64a8577ed5287

  • SHA256

    6a7c3f21e52c9dfc032db2652913a35e3cfc3772adbd8b3db628f95abcecbe2f

  • SHA512

    774e73eaa12286ebd190dee071df7e34f2694d02a6dcc4fcd4fd59edcc8315356ae0f277e623baf1a0f01877bd99471d2cfdb22769451e9b64392cb01046ddb3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zFlwJgs1ffb/NDMKgDrSKrUaMhBD:knw9oUUEEDl9b1QZbK

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a7c3f21e52c9dfc032db2652913a35e3cfc3772adbd8b3db628f95abcecbe2f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections