General

  • Target

    f1f53cf93ce30bdb757db87381aec3ebc213cfcef2afb17f280aef414b239481

  • Size

    1.2MB

  • MD5

    0a4f08aea3fb3c7275bd3b0f34fd3b4c

  • SHA1

    51ac1336aa29d69563defd95288551c05ae22086

  • SHA256

    f1f53cf93ce30bdb757db87381aec3ebc213cfcef2afb17f280aef414b239481

  • SHA512

    ea6167294a271958d4a572998ccf9df278b894e4fc24404f0d75c3df10323f6878042c9010afab39f5720ab34bf1e48dc406d5f8549854469de70187a9cc644a

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhMgXQP9+Gh+ltl:Lz071uv4BPMkHC0INx29LhG

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f1f53cf93ce30bdb757db87381aec3ebc213cfcef2afb17f280aef414b239481
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections