General

  • Target

    1afe119dfc9efcf69209287af3db2592e2f7e01402fd8f4320ad2c4465cc233d

  • Size

    1.5MB

  • MD5

    bcfab857c576cd61e2d2eb005e8c2d36

  • SHA1

    4278b0334ebc20d2689f8b72b3e2c48a853f4fbd

  • SHA256

    1afe119dfc9efcf69209287af3db2592e2f7e01402fd8f4320ad2c4465cc233d

  • SHA512

    4a69db42f18d5c212bab53b4cf35ea9aea98f725c90fb6190656afa5656174932f9be414971ab61f6a6c47299fcb9fe180cc95553a9180d6a49a4e3685460bc7

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t46xKMFORvaURBBzpiWtVI:Lz071uv4BPMkFfdk2afFyxfpEWQ

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1afe119dfc9efcf69209287af3db2592e2f7e01402fd8f4320ad2c4465cc233d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections