General

  • Target

    f7d516037b307b7b704a286260594f342783c0a649190240048a81c95a307465

  • Size

    1.4MB

  • MD5

    210436d81ed1a501d7738b09459f5f17

  • SHA1

    c36e801b045a23296fe3216bc09d9f4460928775

  • SHA256

    f7d516037b307b7b704a286260594f342783c0a649190240048a81c95a307465

  • SHA512

    46e6e1a91572ebe62c783c22196a36ac9fa04fc8185b6313cf29ea13c62a08f6956cc60ad6ef1eac9fdc89373abc97edcc1b8c0bcf4c138cb13eb82a79c775dc

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZGRoeXGXqKIbN:Lz071uv4BPMkibTIA5Jnsom

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f7d516037b307b7b704a286260594f342783c0a649190240048a81c95a307465
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections