General

  • Target

    0de9e239dd1483f13699263f1ef315f9a67d51264f148e04144b4cf63d5ea637

  • Size

    1.5MB

  • MD5

    76416ea053d3ddc979a1957c31890a1c

  • SHA1

    dad26e06bdfd2c5e116fa20d6e139f24aedc20a2

  • SHA256

    0de9e239dd1483f13699263f1ef315f9a67d51264f148e04144b4cf63d5ea637

  • SHA512

    7b309b6afe93f78d60e3d26dd622f96590382b0216bfd080080d11941659886452a2bf7aaaa856960e75f4c29a07b93149ad22fa727c1d42c3b3d4c598ab9df2

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PmK/lzapbU4w2DyA7lO1eANsT4kwu04a/hr69lOpWwDE:Lz071uv4BPm6lgVJUwAdF64xGT

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0de9e239dd1483f13699263f1ef315f9a67d51264f148e04144b4cf63d5ea637
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections