General

  • Target

    1110ea917582f7e130ad18c5ba0bc95db641f3b79d6cd9a86eb4c6c4ea59f51e

  • Size

    1.7MB

  • MD5

    fd46149a97e4a0904ce8bcbc67fd1a20

  • SHA1

    0237489816f480f39da6f2b559c143b0391b6aec

  • SHA256

    1110ea917582f7e130ad18c5ba0bc95db641f3b79d6cd9a86eb4c6c4ea59f51e

  • SHA512

    c0af042756b2c8bbe1ebcb9f93a29bb8dd091b8a0ed6d530125700c1cefe09a37d3a2d39b6ac6d4dd8c9bf3bd335ecbbd140f62cac0b157f90ff6dfb545b543b

  • SSDEEP

    49152:Lz071uv4BPMkyW10/w16BvZ+I8RvjTqTQfJc:NABQ

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1110ea917582f7e130ad18c5ba0bc95db641f3b79d6cd9a86eb4c6c4ea59f51e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections