General

  • Target

    457a67e095ce81c174fc12af0700a6a577e41aef23366201ccb46ed86015af9e

  • Size

    2.2MB

  • MD5

    1861bd46cf86f532bf042c73bbef5e80

  • SHA1

    613ba1320493a06d3ed2db947fb38960656b03f9

  • SHA256

    457a67e095ce81c174fc12af0700a6a577e41aef23366201ccb46ed86015af9e

  • SHA512

    d6b13b99274eea5ef012c2e54edaefd1ddb2c51fdfdb054623864a83796d041d95ed908a67f0a0ecc9cd04a65e3294d489e2508698f157c99da80638e1d4830e

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleX3Dx:NABe

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 457a67e095ce81c174fc12af0700a6a577e41aef23366201ccb46ed86015af9e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections