General

  • Target

    3ea7a8a7045d31597ca38a78950f264062b41800cfc68984046e64bd8a8b6a3c

  • Size

    1.8MB

  • MD5

    393e6ea87da059e7a1f34c612025c5c5

  • SHA1

    4f42a512cc440b748b049feb3b8fbd27d9f28908

  • SHA256

    3ea7a8a7045d31597ca38a78950f264062b41800cfc68984046e64bd8a8b6a3c

  • SHA512

    4955f8955563966c0e79ba75b56ad34d7d542ae201a7d3041bdec10e63604a5fd398b76593519fb8c1cea4b10d3c3119fc1b70e54304b4667dd332478ec426ce

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWQ59U4WyjxaAcjuDXyZe3P2dY4EB:knw9oUUEEDl37jcq4QJ7tW032v8

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ea7a8a7045d31597ca38a78950f264062b41800cfc68984046e64bd8a8b6a3c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections