General

  • Target

    7b4827468114b58cf5e73eb07cbf983b6a462192cb37f8c2c28606e81c7f3eb7

  • Size

    1.7MB

  • MD5

    d0223c0e5e34fe91c1b9cb5a693a6899

  • SHA1

    bf0353af1fd4ed8ced8e7f3f68d425d297cadcb5

  • SHA256

    7b4827468114b58cf5e73eb07cbf983b6a462192cb37f8c2c28606e81c7f3eb7

  • SHA512

    7642a71a8e17452e7e4a66994b765db044435766904f643ef7db40873a672adbdd40859db3ecb6f8d37dba0c46fc4f26b22d4666097decb96e6131a3bcd69083

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8Bl6rM1k4QMQbDA4i1wjlJmAbBm7f:ROdWCCi7/rahwNUMJH4KiRb84Mfd

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b4827468114b58cf5e73eb07cbf983b6a462192cb37f8c2c28606e81c7f3eb7
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections