General

  • Target

    9e57c683bb44b7c8108f3195251e9935c219f6c4f5aa0010ab7dbc8760452e32

  • Size

    1.9MB

  • MD5

    77331e243583826a4fdaa984d455f935

  • SHA1

    78863da6bbeba36d23ea04f446623f5ead05a2c7

  • SHA256

    9e57c683bb44b7c8108f3195251e9935c219f6c4f5aa0010ab7dbc8760452e32

  • SHA512

    521249f07ef1c42543c605aa9e259bbdf6951618b566a454c922d696f286e1157465c4a2e040ea06e08b652f6ce7c382a29297c0786b992e8ae691aafa0b6893

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pz3yA:NAB3

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9e57c683bb44b7c8108f3195251e9935c219f6c4f5aa0010ab7dbc8760452e32
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections