General

  • Target

    10d9ba3ca1b44f935e8abb71ceaaf460bf4ad0cab43aac4d6829195f95fcdfe6

  • Size

    1.9MB

  • MD5

    76873f6cc7260d91449f9f1e444bce35

  • SHA1

    c5344a81d938ea6abb426f72853514b1da6d6a62

  • SHA256

    10d9ba3ca1b44f935e8abb71ceaaf460bf4ad0cab43aac4d6829195f95fcdfe6

  • SHA512

    8e7e43bba1d321dc69c68201d372329c55f74d4091f91da7bbb43147e8c6a1eeee83073e7b9e2081540eaed0b02f5ee775611d996d678a515e800be017bf14e2

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXhIYo:NABy

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 10d9ba3ca1b44f935e8abb71ceaaf460bf4ad0cab43aac4d6829195f95fcdfe6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections