Overview

overview

10

Static

static

10

4f56017228...72.exe

windows7-x64

10

4f56017228...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f56017228cbb572cfa6f594563197d280346dfc876af2fd6b32f2ef88c0b772

  • Size

    3.1MB

  • MD5

    dc21948bc55887fc3d055c31f890679b

  • SHA1

    06182b53669dc04f7ed783068c5f6779591355ba

  • SHA256

    4f56017228cbb572cfa6f594563197d280346dfc876af2fd6b32f2ef88c0b772

  • SHA512

    52fe8362722239b8e51172b7dd11870a562771263e32e9bf6e4010a152c66b1cbc2b407eb0432e05528c9a817589cda2e4eb26fa5120b2de6ff4170613d2e97a

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrW:7bBeSFk

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f56017228cbb572cfa6f594563197d280346dfc876af2fd6b32f2ef88c0b772
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections