General

  • Target

    c6b0e0b5bc244237db8a236ba82b844b74a80a351a0a05701d85cf83f201e552

  • Size

    1.8MB

  • MD5

    1e13141d79aeea49a1c2f1daa3463a62

  • SHA1

    b8314987de473fd79895d4b04d2a4bdd96a08ecf

  • SHA256

    c6b0e0b5bc244237db8a236ba82b844b74a80a351a0a05701d85cf83f201e552

  • SHA512

    a35d8e2102109be97910344eb1abd3c5bcb812e9870f8f5f4c8df3b434586e664a6dc877b5f2b298b3227e654d535358accba83c1790bf0d0dfa13cccca2acfc

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsi51JrtGYcrj6gb2eMkc5kT1pFd:ROdWCCi7/rahlqOdg/cyBB/k5UU6EPj7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c6b0e0b5bc244237db8a236ba82b844b74a80a351a0a05701d85cf83f201e552
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections