General

  • Target

    96037540646bcb11e338e7abd9cf6542d7e12b7fd467cc25c2be29ef38f1dda4

  • Size

    1.9MB

  • MD5

    d75165f0b288502c6053034838cb048a

  • SHA1

    ae5bb5280a71f1729f27ca18d623cea1899b9b74

  • SHA256

    96037540646bcb11e338e7abd9cf6542d7e12b7fd467cc25c2be29ef38f1dda4

  • SHA512

    5c023eb76dfe1540e8bd3809d1a09a382c4261897f0303d649f91b91a6ac086a4b2222a9e4a3ee03986e72e299ad4bb2abfe225c84b1c3ad254049acf85dec84

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXhIYX:NABZ

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 96037540646bcb11e338e7abd9cf6542d7e12b7fd467cc25c2be29ef38f1dda4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections