General

  • Target

    481e684ad498523df8ef578d609d920599c2fb8dbcaf2c802fa5dacce9b5bfca

  • Size

    1.4MB

  • MD5

    b17163249d15171777193ac43da801f1

  • SHA1

    47306965dd17509303cb4a53095b71c365445b81

  • SHA256

    481e684ad498523df8ef578d609d920599c2fb8dbcaf2c802fa5dacce9b5bfca

  • SHA512

    8993169e5e26904459994fcd8d67285df30b288b666f9caf7d033a3ba61e6d5399edf14c0daec4c14ce41365336a0681973420251d92473eb90c98ef34649678

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhMgXQP9+G5KBe2ulQ9PRKHK+:Lz071uv4BPMkHC0INx29L5KQ2uBt

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 481e684ad498523df8ef578d609d920599c2fb8dbcaf2c802fa5dacce9b5bfca
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections