General

  • Target

    634c9e3616904dc14f70698deb605b2756cb8733b6e8aef14fcb03a999105a1f

  • Size

    1.3MB

  • MD5

    4e7e4f804d567b123617639c5320b89d

  • SHA1

    63b603a52d6196577c2f499c03501e56d7609912

  • SHA256

    634c9e3616904dc14f70698deb605b2756cb8733b6e8aef14fcb03a999105a1f

  • SHA512

    d973748daac152e3a065556bbbb3a168ccbd2bb83673f617e51045557f28402def1a3b3cc795aa5bb3037356f9cab74f99b47bb132077ced6f9bec60a023c974

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdUwOPE:Lz071uv4BPMkHC0I6Gz3IE

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 634c9e3616904dc14f70698deb605b2756cb8733b6e8aef14fcb03a999105a1f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections