General

  • Target

    785fb0489bc21f9e2bf7f40aee2318ae332ac00cf058079ab25784c681234b63

  • Size

    1.2MB

  • MD5

    06d20b7cbc52d0c66142cf38aaccb8c4

  • SHA1

    30dbacc283f1fc38331c1b95137edf0b36af4fa6

  • SHA256

    785fb0489bc21f9e2bf7f40aee2318ae332ac00cf058079ab25784c681234b63

  • SHA512

    cca79c827df753efd2d4e16166fd989df5937858c053bbeaaf2b90371b2c062a8f3ba8a9139611b39dad41ce8ea464dd1297d249dfd1e7a879298b3c56791293

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupaXHeY5sspBs:Lz071uv4BPMki8CnfLvg

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 785fb0489bc21f9e2bf7f40aee2318ae332ac00cf058079ab25784c681234b63
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections