General

  • Target

    28b45b5575dc123001273e02e083ee865422a79154bb0bda03a64e833a2dd303

  • Size

    1.9MB

  • MD5

    fcaf574516169bddb93a3e8893ad8ff3

  • SHA1

    530bdb8f495a3f206cc801320271f80df3ccb62f

  • SHA256

    28b45b5575dc123001273e02e083ee865422a79154bb0bda03a64e833a2dd303

  • SHA512

    c9fd1971e49ae3e2087016f74f78a9efea58d268f1a4b0f20e15c4defaf6dfacfd3511e174ff18a41eff832ba7cd3dba3ab56f5fa301d9fb17d9ee72d3d30bd9

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIXxeHNECkscK9cQa:oemTLkNdfE0pZrJ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28b45b5575dc123001273e02e083ee865422a79154bb0bda03a64e833a2dd303
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections