General

  • Target

    58758fc82b8418def0abce54aa8adff6c18f059baa73299d4861fe94f58f7084

  • Size

    2.3MB

  • MD5

    bab13ce1922d4cfe6b9cb90f00dc6d2b

  • SHA1

    6f689038a20471ba9917168d5af852563c74d648

  • SHA256

    58758fc82b8418def0abce54aa8adff6c18f059baa73299d4861fe94f58f7084

  • SHA512

    a4115d612e10bb8189b4ceb1acd97dec1d19abc3448bcd7482b2bf31506a6bd65d5d30b6b61b7dbd1be18018a212a327bda573c29714fef586519a9bb9245502

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cRbt2:NABG

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 58758fc82b8418def0abce54aa8adff6c18f059baa73299d4861fe94f58f7084
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections