General

  • Target

    4ca6cfde58a77e67e0b0a9c9dd3b1a2e0068e97c236b51771d782e84718622e0

  • Size

    1.4MB

  • MD5

    102736b2da631dc415070e86795de2a4

  • SHA1

    09d06d024425764f6a5b8f79fdf3c4a12b300e12

  • SHA256

    4ca6cfde58a77e67e0b0a9c9dd3b1a2e0068e97c236b51771d782e84718622e0

  • SHA512

    b942cd952463fbb2c60dbf86b27c9ba8f8710cba0430f0512bd11ebb470f2a7d40f046aa031ba2e8eec27e61cb66caf26978313b802dd923baf221cf0b1bb587

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/QoZo6TOZmkTz3ebFO0nYcP8mmhl7KP:ROdWCCi7/rahW/zaZToF78C

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ca6cfde58a77e67e0b0a9c9dd3b1a2e0068e97c236b51771d782e84718622e0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections