General

  • Target

    0d9b316e55f79c8809eb506e063f914dca8ca038f95a3ccafb64dd37bc872d75

  • Size

    1.5MB

  • MD5

    2b6b3354276185125f4c0b46d0dcc9ba

  • SHA1

    eeb03cc2c4a0e09a1d63f5ff6fcbd35350e0ff28

  • SHA256

    0d9b316e55f79c8809eb506e063f914dca8ca038f95a3ccafb64dd37bc872d75

  • SHA512

    38ba3bb2b7f33a3ddc641d193e6b0f487a8a63c95b52e6aa279fa3d2534a409a44afaa0e9de6225be3f798be99f6c22045616062ac1c56a98b96f79448425357

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Oi8T1l4YLk1o2bPmwbGrFZ7p2Ydbf/FIunq+PITn6e:ROdWCCi7/ralHs1PTma87Xxy5hTJ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d9b316e55f79c8809eb506e063f914dca8ca038f95a3ccafb64dd37bc872d75
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections