General

  • Target

    4dc4bc3c5747039ae1ec0e65ab6a0849a59ad78169526ccf8272bf78a4891963

  • Size

    1.8MB

  • MD5

    149cf21d7cddb4f8d2923f37d524f5f7

  • SHA1

    24b5c0222cfb0a68355297d1e1d45623263eb03f

  • SHA256

    4dc4bc3c5747039ae1ec0e65ab6a0849a59ad78169526ccf8272bf78a4891963

  • SHA512

    c2b816ab498da17443949d6effc888ad2d09f56970dea41211c43c50f489ac6836b72a7fec0091dc6b127ec2575b0eaa249b0aace8913def63f353dacbd055ea

  • SSDEEP

    49152:Lz071uv4BPMkHC0IaSEzQR4iRLUUaayyP:NABO

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4dc4bc3c5747039ae1ec0e65ab6a0849a59ad78169526ccf8272bf78a4891963
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections