General

  • Target

    65e6459d47fc85dfd4d11c75438952c03aeb22e93da1bb1802a7bda57de830f3

  • Size

    1.6MB

  • MD5

    3cb5949cc479c97c6fd53c4fcea2831e

  • SHA1

    93e9f2dc2f64ce4048d9845c7bb48d446e9f0238

  • SHA256

    65e6459d47fc85dfd4d11c75438952c03aeb22e93da1bb1802a7bda57de830f3

  • SHA512

    1a98c8160ebf629c1b518a94c05732117886ed3d5988fed57dee894df7b0873782ead8f257e055df3a07f4962941f9475e38a2793f38501843baa8d8df6fa127

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupQF4g6FNGzM2qAZsq:Lz071uv4BPMki8CnfZFZzMu

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 65e6459d47fc85dfd4d11c75438952c03aeb22e93da1bb1802a7bda57de830f3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections