Overview

overview

10

Static

static

10

da40bb9539...d8.exe

windows7-x64

10

da40bb9539...d8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    da40bb9539d8943444a650ad8d73f9cecc03412e938187b011b0e1c09a8cf3d8

  • Size

    1.8MB

  • MD5

    1655e1df9fb5993741545bf3a1857e31

  • SHA1

    ddc4e77e9e200154c91e58d2f6896b6aba5b5548

  • SHA256

    da40bb9539d8943444a650ad8d73f9cecc03412e938187b011b0e1c09a8cf3d8

  • SHA512

    b5e9d82825da7f97b0a914395f88125d71b18eee8fefcbb873b326c7a687ea52068e750b302b1f73c83f1e59f9b1ac54cf2d0a57d7d1a9cfeb2283f39ee77119

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VotepFIG:NABU

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • da40bb9539d8943444a650ad8d73f9cecc03412e938187b011b0e1c09a8cf3d8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections