General

  • Target

    c33d1b87af00c7e5bca73369911a115a18a38bae1d3754cfcf29cb118cb1e9ed

  • Size

    1.2MB

  • MD5

    50012b760c90c735e751989fbc4f0a8d

  • SHA1

    bfbf7157a71dd349bb8ca2825715df2de7a7e90f

  • SHA256

    c33d1b87af00c7e5bca73369911a115a18a38bae1d3754cfcf29cb118cb1e9ed

  • SHA512

    001460be519d77ca12554993810d32035155918b41099fcd99328f3c4d83abacc3403e6a2da245250fac15889441788cde12e23d0b59a3d3edee8d0e32dee60c

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnqI4wHiYfn:Lz071uv4BPMkHC0IlnBD

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c33d1b87af00c7e5bca73369911a115a18a38bae1d3754cfcf29cb118cb1e9ed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections