General

  • Target

    4d997051430a6ef734194e0a21c8bc62cd65fc72d3cad69afe793ff16ec17766

  • Size

    1.9MB

  • MD5

    19fa9af904a49501dbab2090cd07c4ee

  • SHA1

    cc2032f6a9a8808400b091fa9a8d9499bd53bd3a

  • SHA256

    4d997051430a6ef734194e0a21c8bc62cd65fc72d3cad69afe793ff16ec17766

  • SHA512

    3deb81d5292070ef6fbb348978138aed3079c18d6497d21fb57c39bed3dcbc421410aea81e42641d1a696e662f8c355717889689bc4e0a4114cce9e3392d6a8d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7EdN4scYTKYNY4sO:knw9oUUEEDl37jcqMHdqscemdob

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d997051430a6ef734194e0a21c8bc62cd65fc72d3cad69afe793ff16ec17766
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections