General

  • Target

    c661427224691057c55690861d7a05bf100172630fcc821ac55149a7ab04d0c3

  • Size

    1.5MB

  • MD5

    04c5726c99c90929ab12c55bcfc57569

  • SHA1

    0c40e834def7e82b4742d404406465c3a1e6243b

  • SHA256

    c661427224691057c55690861d7a05bf100172630fcc821ac55149a7ab04d0c3

  • SHA512

    b1e31a913e517da821cb3d5dd5be8a887dfb0f0c6c14bca15f170f9d0d4702cab3df7bda13ebc600bb9c62ee00b8ebc3d152e0510f4b69ea8ea149efc7120886

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00caCFogCZtE8NUZ:knw9oUUEEDl37jcmWH8SKJhSM3mEC6

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c661427224691057c55690861d7a05bf100172630fcc821ac55149a7ab04d0c3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections