General

  • Target

    d4cd4b98003a2d75e5b55ffed1e1aea2e4c68e0387ec53a758d02a6ecdbe9fdf

  • Size

    1.2MB

  • MD5

    1f1773deb58204343493866c158c0d89

  • SHA1

    1e2271e7d6c727701b1b495b496fcf793562a66e

  • SHA256

    d4cd4b98003a2d75e5b55ffed1e1aea2e4c68e0387ec53a758d02a6ecdbe9fdf

  • SHA512

    034f59e6f75cbce6cd88ee78145c65e5576761a1565cb681597c8642e6f0dff5873c73c4f33e251c7310f728460bd4aacd991e9ebb4c1b00b557ccd7e5e3ca15

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvj7NaVNqd9OeSZyfl6cWa:Lz071uv4BPMkHC0IaSEWlR

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d4cd4b98003a2d75e5b55ffed1e1aea2e4c68e0387ec53a758d02a6ecdbe9fdf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections