General

  • Target

    1f918842f93cad82ea0853b4be1925e779f67e42adb042a295c3d31d615c2e4c

  • Size

    1.7MB

  • MD5

    106c82f469b1d41b54f56fc39f639b6a

  • SHA1

    fd8b327e06581b33fb9e015151d2850f10035ae0

  • SHA256

    1f918842f93cad82ea0853b4be1925e779f67e42adb042a295c3d31d615c2e4c

  • SHA512

    ef90eaa4bd7f7021da4c5cb056787dea0e2359f762e6099d7e2c0879a6a935e7d8998907c5dd1101e5c221d1409392e9d5a058cc6f2dae01a1a6855bd0c27539

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNIjTnHzlyZA52C3EES:Lz071uv4BPMkFfdk2auTg0lS

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f918842f93cad82ea0853b4be1925e779f67e42adb042a295c3d31d615c2e4c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections