General

  • Target

    b3e05f212b26fb241f7a430486e8c96ec4274b9b32e67fd9f8a986b8773616ee

  • Size

    1.2MB

  • MD5

    80fa6b10702a76c018c85505d5447040

  • SHA1

    5d47b8118ceba9e17c0bc6e529f1d41f1115dde7

  • SHA256

    b3e05f212b26fb241f7a430486e8c96ec4274b9b32e67fd9f8a986b8773616ee

  • SHA512

    b566331aa04d8c183e45623d719c8022267d1163f9009d09528e49a43c65a402dbe9a9d2599c13a085c497b22c92e83ae553a89f209d6b13748e5d241a0adbac

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdLqSqIz2WC:Lz071uv4BPMkHC0I6Gz3Lqq2p

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b3e05f212b26fb241f7a430486e8c96ec4274b9b32e67fd9f8a986b8773616ee
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections