General

  • Target

    e601f518e2155edf8488b13c86aff66535e66c6d28e6030a23447c870a549585

  • Size

    2.6MB

  • MD5

    4b0b25bb69bab2147a8b69184a38bb05

  • SHA1

    da0489ac164335b04ae6469286fa4736c3aa99c6

  • SHA256

    e601f518e2155edf8488b13c86aff66535e66c6d28e6030a23447c870a549585

  • SHA512

    07d6f635a0f6acbaea010577533e9cddda9a5e339c1709cfc6c7ae0b25a7388dd98b3d37bcb7bc3303c1b13ed47f8fdd13a389aa3d0ff2c61c91f4affaad5b2c

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8Cnki2WtqfvB:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R2

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e601f518e2155edf8488b13c86aff66535e66c6d28e6030a23447c870a549585
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections