General

  • Target

    1d4773455fffe9716d073cf353eacbeb779b357dfa90d791669f9c623af1e0d9

  • Size

    1.7MB

  • MD5

    8cb1e4c55ba527e3efc6e12c1ce43e00

  • SHA1

    034a6b78938230c3e2de51863b225062d524b557

  • SHA256

    1d4773455fffe9716d073cf353eacbeb779b357dfa90d791669f9c623af1e0d9

  • SHA512

    d5646ad07ba7ed85fde690e6ef15ccc7d86fbf695e360ea94b8bd74d1ba6af6a4e7113a1ea6e168b7b01849005f559fbc62941b34e0e42ab77f17f7eadec15e2

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Qk7SW7r+kQQ7dXQARBa5e0ag2K0hvL7+:Lz071uv4BPMkyW10/wKV7hjSe05c2Hx

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d4773455fffe9716d073cf353eacbeb779b357dfa90d791669f9c623af1e0d9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections