General

  • Target

    61696d1a91bd2b6d312973effb7ad51ca16e0c6146d208590327761e9440575b

  • Size

    1.1MB

  • MD5

    66e4f18693f5f89e52ff48024f453e14

  • SHA1

    150c89683a3fc897a0b4a6a33013ab6fb7dd2e09

  • SHA256

    61696d1a91bd2b6d312973effb7ad51ca16e0c6146d208590327761e9440575b

  • SHA512

    d013751fa9446a59cf708905045afe78849d2dc023e78704b414f9aa0f39650283807645ca2f2d518cd8f5c6c6d03c443d5e4787564f32628ae505a12aad8ffc

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PmK/lzapbU4w2DyAa3DzRAmE2Z//Fd8:Lz071uv4BPm6lgVsDzR4

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 61696d1a91bd2b6d312973effb7ad51ca16e0c6146d208590327761e9440575b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections