General

  • Target

    c783163bc459f03ecd9d8599ebab609d061f3a0dcfbec358960dd8cc72365d79

  • Size

    1.9MB

  • MD5

    889b773654b2f6484faed428f45df768

  • SHA1

    009173de7a320f4015025ba66bb306ee16f94285

  • SHA256

    c783163bc459f03ecd9d8599ebab609d061f3a0dcfbec358960dd8cc72365d79

  • SHA512

    ca8f0f30ccaa11a814c8fc20a9ac8417a83360ab73e630e0a9ec35b74215dc3d735264ebfa7f2711bed8824ea0ffec1ee5f3ae094b4942de8dcf59d252fd3911

  • SSDEEP

    49152:Lz071uv4BPMkHC0IlnASEx/mi1DLIBn+Vue+lrt:NABq

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c783163bc459f03ecd9d8599ebab609d061f3a0dcfbec358960dd8cc72365d79
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections