Overview

overview

10

Static

static

10

2aa3b0170a...af.exe

windows7-x64

10

2aa3b0170a...af.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

Errors

Reason
config extraction: GuloaderBin: guloader: invalid shellcode

General

  • Target

    2aa3b0170ac074d41b3443b429e423433cdd9a83cabf014552880015bbb110af

  • Size

    1.2MB

  • MD5

    d7359ff0b2df5f5e3eefa2aa7a239f2f

  • SHA1

    c866cd9624ea60304936681ac9c5dfb8620cb9d3

  • SHA256

    2aa3b0170ac074d41b3443b429e423433cdd9a83cabf014552880015bbb110af

  • SHA512

    bdd78ebc25c9826007536cc3ee62329f79789b75fc6e3fa18722554cd435c6e19873f25e2cffee14b93fac51c5c215586eb27821945331add5c4f2e4685fd16b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlgQ5aILMCfmAUhrSO1YNqK:knw9oUUEEDld5aIwC+AUBsp

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2aa3b0170ac074d41b3443b429e423433cdd9a83cabf014552880015bbb110af
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections