General

  • Target

    1b14ee724add0236d08fdac7c24146b770b19c593b436f7dcf34d1e3b40ed1db

  • Size

    2.9MB

  • MD5

    93d8df98b71802f55b50cf527cd36a22

  • SHA1

    2f3480272be0e309fdfb8d152c6dccdda5a27801

  • SHA256

    1b14ee724add0236d08fdac7c24146b770b19c593b436f7dcf34d1e3b40ed1db

  • SHA512

    4b75e085968d2aa8f77148cd310694163dc57c675207ef8bba521990cad7dad8f569574ea144cdb11342659280952842187dd9aee76d1e797b97fc1ffb1881ad

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IaSEzQR4iRM:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RO

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b14ee724add0236d08fdac7c24146b770b19c593b436f7dcf34d1e3b40ed1db
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections