General

  • Target

    54d75b69a448bda4dedb9e6fe3335d7c2457e0d0264c7c457cca17364c970eca

  • Size

    1.8MB

  • MD5

    f4f69f2d004a582e6530e18087d13df7

  • SHA1

    4490eabb249b77d8aa18d3b366cba0674a7f147b

  • SHA256

    54d75b69a448bda4dedb9e6fe3335d7c2457e0d0264c7c457cca17364c970eca

  • SHA512

    7977dfdec7f85c172e90a48bacc000d3b68d72febb00967f410ddea94838c42b396a366993b920c8a5be15664887b7a87f263ce0f0bc2ca3c59dbe0b5b7b4d2d

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7fI+7RrTFl6hvVjC:Lz071uv4BPMkyW10/w16BvZX71Fq86zM

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 54d75b69a448bda4dedb9e6fe3335d7c2457e0d0264c7c457cca17364c970eca
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections