General

  • Target

    ef402c339c81ab0ded03e92eedd36f5c132a0228205ca02f20ff62cd04b3a722

  • Size

    1.4MB

  • MD5

    442ad10a6b13125175eedb0170a8613c

  • SHA1

    5e2f3d78b8d8668012cbc37246fd1c25f9adbf5d

  • SHA256

    ef402c339c81ab0ded03e92eedd36f5c132a0228205ca02f20ff62cd04b3a722

  • SHA512

    b762b09d691a2ea1671322332198c3165b5ac676a8aba55489923c3002e0075630dbffe48c4e8eea314a21b49b6d79a9c3c15ba1b56a35c66cb8585f12dac50c

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQ6thdqPicRWK9y8J6xjpvQ:ROdWCCi7/rahW/zFdDlhUKn8uW

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ef402c339c81ab0ded03e92eedd36f5c132a0228205ca02f20ff62cd04b3a722
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections