General

  • Target

    4c821423c07054fabae38078d87a7cad47e0a6b8496b0534f391142b9ee19af3

  • Size

    1.6MB

  • MD5

    a2ab5f2396931fbbe51c031db8284f8e

  • SHA1

    0e5732b35c6d1b9feacabbdc9479b6c2ca804c42

  • SHA256

    4c821423c07054fabae38078d87a7cad47e0a6b8496b0534f391142b9ee19af3

  • SHA512

    24b026071d8b502f430f399e592d5ed35301922a6760c629b643619b2bb178db92aa7875576b96e946d44c12ac8a36bf0867cc486e9da226a6dc493472498d89

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PmK/lzapbU4w2DyA7lO1eANsT4Z8+8KYECFjooqG:Lz071uv4BPm6lgVJUwD+83FxqG

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c821423c07054fabae38078d87a7cad47e0a6b8496b0534f391142b9ee19af3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections