General

  • Target

    2a9d35cc5e9f7a8bb3466b3b10945671542de57fc4ac2956110d10180ae76d3c

  • Size

    2.0MB

  • MD5

    49e3723ede3d2c0e8330d1124cacb163

  • SHA1

    6149f9061af1ee3e0575911d6b06e4067d3febfb

  • SHA256

    2a9d35cc5e9f7a8bb3466b3b10945671542de57fc4ac2956110d10180ae76d3c

  • SHA512

    ac3d6568e6d03e8938c3f430bd4c774573b7ebb87f83e04c6a3f61e14d0c4ffca63aafcede0815cbb273cdc5f34445a4bf4d94fd9af02afaa048b0a430af61a2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7EdN4scYTKYNY4sF:knw9oUUEEDl37jcqMHdqscemdok

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a9d35cc5e9f7a8bb3466b3b10945671542de57fc4ac2956110d10180ae76d3c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections