General

  • Target

    6d7bfc9fbb273c4a71f3cf9827a8802c286ef5eefeef10e42a6681d2d9c81417

  • Size

    1.1MB

  • MD5

    4a3046b10bfc107f5fb3e86ce8e8d3d4

  • SHA1

    a694180993d4a8286d2b3c1d6f7020e4a7d63aac

  • SHA256

    6d7bfc9fbb273c4a71f3cf9827a8802c286ef5eefeef10e42a6681d2d9c81417

  • SHA512

    10fa8c573b2234c2bf4a2318dcfcf13e2a524431efd116de6f556faa42a12b00fa496a55dd5f89d779582bbdcaf447d5647b5f81e58742207c20dac97bf5f09f

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFs1XllvB5zJs3+/hVNV4:ROdWCCi7/rahOYilJ51subNW

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d7bfc9fbb273c4a71f3cf9827a8802c286ef5eefeef10e42a6681d2d9c81417
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections