General

  • Target

    bf0f02a2dc267ed07dd82f6b252938e2cbf26429136be91fa7b83666d1ce6c65

  • Size

    2.0MB

  • MD5

    3ac27414d65c09ad33ebe76ddebc14a8

  • SHA1

    a42b87271bf6842a81504c884c7fe99ca0fdcae8

  • SHA256

    bf0f02a2dc267ed07dd82f6b252938e2cbf26429136be91fa7b83666d1ce6c65

  • SHA512

    cf7e11a50c9e823bc5abe9eddc2b86f05199be91d96f30aebe86f9872954e2885d1e6603604be70dcee5ed6628f710180b1b8fcdbd1beca9b72585c63402b255

  • SSDEEP

    49152:knw9oUUEEDl37jcmWH/xbbFN/NM5hAf2rtuIFD:kQUEEv

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bf0f02a2dc267ed07dd82f6b252938e2cbf26429136be91fa7b83666d1ce6c65
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections