General

  • Target

    4362214f22b024068ced02754cc9699aa1691c82e9409f4222c8061d57b5cd66

  • Size

    2.4MB

  • MD5

    2edea08b0ff41ea34548ce7e3733715e

  • SHA1

    62682148aabe975f7b965cfa7450bdb4ac3efba8

  • SHA256

    4362214f22b024068ced02754cc9699aa1691c82e9409f4222c8061d57b5cd66

  • SHA512

    3d89e15612d7e0e3538a1d5a6646518ff80d9000d8fd2ef8a61685df0515568bf0e5ec23711fec7bb7dcf87972d3dc2ded593657a36f1d10e9aed3559156e499

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTN6IGe:NABT

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4362214f22b024068ced02754cc9699aa1691c82e9409f4222c8061d57b5cd66
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections