Overview

overview

10

Static

static

10

dc08484faf...3a.exe

windows7-x64

10

dc08484faf...3a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc08484fafd366ad6b40ccba117b36a04a3e40b9d6632105e1a505a47c9eba3a

  • Size

    1.9MB

  • MD5

    56ada7c417e7037e8840262c5ae9c6cd

  • SHA1

    47d7885106ae2ee8dd3d894cdd32c0a3f9ff4a08

  • SHA256

    dc08484fafd366ad6b40ccba117b36a04a3e40b9d6632105e1a505a47c9eba3a

  • SHA512

    0692320462a6068545a722eb60bb277cf019cde2752d09196b624a0bccd77aaf06af80decc2b30e5280ed3203a19e9ab1306ffbf2b3b8a7357b598015732bdf5

  • SSDEEP

    49152:knw9oUUEEDl37jcqa7V/gZVj+dtMpQfI0Ml0:kQUEE6

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dc08484fafd366ad6b40ccba117b36a04a3e40b9d6632105e1a505a47c9eba3a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections