General

  • Target

    e4176de040a0bcb6755d1d94ed9c5d2cb2fbc1997124094097484af345bfdc64

  • Size

    1.7MB

  • MD5

    49737d1a976a791c843c07b6ece65048

  • SHA1

    47443a53921c48b45a74f2f90b75a50987b2399b

  • SHA256

    e4176de040a0bcb6755d1d94ed9c5d2cb2fbc1997124094097484af345bfdc64

  • SHA512

    d7087b6f49f4e9f4a8ee00bb5238f604f8def7af71a9d11a43475a8a851ec3bc88997a9f760c831c8f6afce92157e5259028a274aa1c8e968403f97ac17d6d0b

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PmK/lzapbxikE5EkJyQfedz4Gc41aYlKbsZxsEoMvyg7:Lz071uv4BPm6lg6EW7EzxsEoupQYT

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e4176de040a0bcb6755d1d94ed9c5d2cb2fbc1997124094097484af345bfdc64
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections