General

  • Target

    495c77bfb8b5887a442ddaecbc57121f4d6199e13ad9ba61f05dd7878d598721

  • Size

    1.6MB

  • MD5

    b5e4d619788b4d745e70f99e8ebe03af

  • SHA1

    5a5f208e32694cb55f78f64fd9317321854f0ae3

  • SHA256

    495c77bfb8b5887a442ddaecbc57121f4d6199e13ad9ba61f05dd7878d598721

  • SHA512

    230a08d8f897547a73d47149544ea79d9292ab32d9af95c77be5e2fee8e3717ae40d165d2b4187918c27795ac73393734c4a9590d750fde9f677608f8f45b2df

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipBh8tGxHIBWGlTqTmo6OZXbPbPIdkq8T91EQQsp:Lz071uv4BPMkiFGlvETbvpt

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 495c77bfb8b5887a442ddaecbc57121f4d6199e13ad9ba61f05dd7878d598721
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections