Overview

overview

10

Static

static

10

0ca4062cb2...fb.exe

windows7-x64

10

0ca4062cb2...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ca4062cb2d5f2efc6175ceec5bdbd3f38b7a13ca527ce5f009c3f9ad7b3e8fb

  • Size

    1.8MB

  • MD5

    0ed5798704bd396b97ccebbd75b96568

  • SHA1

    67b51267907ab3938b6d851676c89d055c8eb2e9

  • SHA256

    0ca4062cb2d5f2efc6175ceec5bdbd3f38b7a13ca527ce5f009c3f9ad7b3e8fb

  • SHA512

    f0ca2b0c13ad2f33baa9b7c2e5b53f43728f8e366cdb19bad612c2f126abe6dbc6c2e743c46f687564a843beeea47609731f6a80f09b1435dd30c5e6a4af6ddf

  • SSDEEP

    49152:ROdWCCi7/rahFD2P6QV8Nq8AgmUtBrdHa61Z9:RWWBibaj

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ca4062cb2d5f2efc6175ceec5bdbd3f38b7a13ca527ce5f009c3f9ad7b3e8fb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections