General

  • Target

    3b768d60196aef65cfe0b6aac0679a2deaaf4ce0896e6e6f46e045d44efe1f37

  • Size

    1.6MB

  • MD5

    3142e0ec9988cf55f59ea34727a64831

  • SHA1

    40287c181e0d500c0a30f8a20d94885d4c97cc0f

  • SHA256

    3b768d60196aef65cfe0b6aac0679a2deaaf4ce0896e6e6f46e045d44efe1f37

  • SHA512

    e75d4a399869731e7f0fa5fb19e33a0a99458f95b4fc095acead00c93bc8c1e07fa63059c32d3002f9aa7b8d42754dd68a8bc68bb0a1832eac45fd9e6f6dc3f7

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF672E55I6PFw12TJ1tmyNJeo55TadLHYwU6l5//TSU2teZ:ROdWCCi7/rahF3OioF5qdh2yV24OM5Im

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b768d60196aef65cfe0b6aac0679a2deaaf4ce0896e6e6f46e045d44efe1f37
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections