General

  • Target

    00193da1af97eea1d00f846d95c8ff0258efc325fbf89e486548d210eae2db37

  • Size

    1.6MB

  • MD5

    1e0d8fe067485cee0ae1c65e5031a1cb

  • SHA1

    22034d3e1c5bd02bd3ec6caf5dbf312a575df9ab

  • SHA256

    00193da1af97eea1d00f846d95c8ff0258efc325fbf89e486548d210eae2db37

  • SHA512

    e6ee0ef3ba3180e4340fd3864eeb0ab4768929c430e6b7914d4a66b5d2a84e4af0370643d7492921dc1e9c7c31a157ea6000fbc1bd424ddb1b2546c2a9e01c18

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgsZLHYm2WVDtdpR/rq2:Lz071uv4BPMkFfdg6NsNtJVlRTT

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00193da1af97eea1d00f846d95c8ff0258efc325fbf89e486548d210eae2db37
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections