General

  • Target

    89ae5a4a90a67c5d5ea6a3631843ac00ef250a2f358fa3f702e41ea394870150

  • Size

    1.9MB

  • MD5

    0af47bf0e049e644ca1c0ccd5563d692

  • SHA1

    7f5fbaea85b74cb4bfc4ed4309c2345dd5ac4169

  • SHA256

    89ae5a4a90a67c5d5ea6a3631843ac00ef250a2f358fa3f702e41ea394870150

  • SHA512

    df16fdbd3a873a55022faf2743a30315d28ea776982a4a686674b43090d52a5753b55d4c9d9b44920619f0cc36f1cbe887c063cb26166f93ed0ab3bd09bfc004

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5I4TNrpDGs0s2LT+J:NABI

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 89ae5a4a90a67c5d5ea6a3631843ac00ef250a2f358fa3f702e41ea394870150
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections