Overview

overview

10

Static

static

10

f40f8e1c23...e2.exe

windows7-x64

10

f40f8e1c23...e2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f40f8e1c232e4086a483b5abfb137acb63a3e03596a3a08011eb047de61598e2

  • Size

    1.6MB

  • MD5

    abc65850bb30c04962d0ead09ff223b8

  • SHA1

    204c20c734d65024473e8bfc7855bb6e9c64d3bd

  • SHA256

    f40f8e1c232e4086a483b5abfb137acb63a3e03596a3a08011eb047de61598e2

  • SHA512

    bcc918c1c000346263f4c6fc1859269eb01518a174f8acf199b8835999d1bd5f5c7b6247217d9062e691f02f0cb7621d926bd5c27c9a3affc63b15895a4723f3

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkiptb8q33F1QeQthKJAc+StNfNuUv6asC22iw:Lz071uv4BPMkivwSbaMrf2e

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f40f8e1c232e4086a483b5abfb137acb63a3e03596a3a08011eb047de61598e2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections