General

  • Target

    fe05d62649ee88d76e8f35cba3c4ff6db775d13cff5ab0ca11b2b626e128bfaf

  • Size

    1.9MB

  • MD5

    0d0169fb4d299c4657d3edd5a565cfb5

  • SHA1

    8c6fc6c804ca30213dd5679997f9d55b33a88d17

  • SHA256

    fe05d62649ee88d76e8f35cba3c4ff6db775d13cff5ab0ca11b2b626e128bfaf

  • SHA512

    13e932991fe17fd9f773357d09767f06fadf3e353aa8df8081fa277a2f0805a332009788f12a737f91c2c70e52cb9955e27bad06a00818b2c6073f0333d35e08

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p+tiS:NABC

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fe05d62649ee88d76e8f35cba3c4ff6db775d13cff5ab0ca11b2b626e128bfaf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections