General

  • Target

    f51c77054d7d9175ce794b0b529a133f3fbc94834be3050cc5e4dad86ae43df4

  • Size

    1.3MB

  • MD5

    2368ed2fc327eaff6ca66a5b0b7c8ee4

  • SHA1

    6622c44c239aaf66ae3d323261f2552a0f2d3d8f

  • SHA256

    f51c77054d7d9175ce794b0b529a133f3fbc94834be3050cc5e4dad86ae43df4

  • SHA512

    b601fe031787e2876c710f7c2c5e83fd0cbc1a29f28102804ccd85b5b8420296043b1cc46f2b017071c6eb7bf503b172a536ff2eaab9838f31a28dae77f752d0

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCnl:Lz071uv4BPMkFfdgIZohtew

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f51c77054d7d9175ce794b0b529a133f3fbc94834be3050cc5e4dad86ae43df4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections