General

  • Target

    9fa41105b38465a3580ca37e2cd63772e5c285373d3c75221ca20e6a8c7906b0

  • Size

    1.5MB

  • MD5

    4ce3c88020b8430cfd7f5d79d5013c31

  • SHA1

    a131d8eed9e0703fe2b83dc14fc0d5b61b7e4ced

  • SHA256

    9fa41105b38465a3580ca37e2cd63772e5c285373d3c75221ca20e6a8c7906b0

  • SHA512

    d5fa579f2a0c617421db87a19a7055a42241dc09ec52e93cf4762cd84fc73114920e32603d23e0e2291c9ba41813a876a72f8e041709812f2801c6a3947bf289

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8Bl6rM1k4QMQbDA4iZhn/BjDvcoxr:ROdWCCi7/rahwNUMJH4KZhVvL

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9fa41105b38465a3580ca37e2cd63772e5c285373d3c75221ca20e6a8c7906b0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections