General

  • Target

    1c4d79864d6b4766929f6061ed8af25b31ae991af710a749fd2375ae27442775

  • Size

    1.7MB

  • MD5

    f0a3be0774175423e293f7dcfab2c99f

  • SHA1

    ace39f0eb3f55cfcd5dfc3fa2a5949c9720413cc

  • SHA256

    1c4d79864d6b4766929f6061ed8af25b31ae991af710a749fd2375ae27442775

  • SHA512

    b5730f13166778d74513771a51b799d384689ea46542d35f5cd9c96af0ad8470f9528313996735f0e361d712ebbe3c58b4f9a7a37346cf404384f642391aeb5b

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoY58SiAO+9rUGaLA:Lz071uv4BPMkHC0IEFToChvLkU

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c4d79864d6b4766929f6061ed8af25b31ae991af710a749fd2375ae27442775
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections