General

  • Target

    56ee4ed215b6253fd6449e8fbfc5a39758c925ce738831bdb9da7b529acb0d89

  • Size

    1.7MB

  • MD5

    7e664c0379ada7b684808cbaf8cefe11

  • SHA1

    98319de3e41debba8c5abd13a927ca48a7097e8c

  • SHA256

    56ee4ed215b6253fd6449e8fbfc5a39758c925ce738831bdb9da7b529acb0d89

  • SHA512

    b09e18dfc3a655412e216c0a43b2ae37e0df75d374fbb06f32cef45d651a009b13afb4de0b3f68971718cb378915d5cef7f240fb67f6a472110a26beed7e31bb

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFDnFelw+HT8V1NCgvY8R3wSLDvRu:ROdWCCi7/rahOYFbyhopxW1X

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 56ee4ed215b6253fd6449e8fbfc5a39758c925ce738831bdb9da7b529acb0d89
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections