General

  • Target

    68c7d0c0a395ec497f3bdf3d1d6312d1af5612f2aace088cfe0f080dfb7569c3

  • Size

    1.2MB

  • MD5

    371f7dc411621076dce63e0b834b5a37

  • SHA1

    136bc17114d63a9ff339627990d426de0d6c5d60

  • SHA256

    68c7d0c0a395ec497f3bdf3d1d6312d1af5612f2aace088cfe0f080dfb7569c3

  • SHA512

    93c6c7d0506e5dddfe9046ec14d49c2d471d79c69adbae3f596cb913cbb64537de251d638fe32bee5eb16d3ba938d8c91896e7ef849aa8be38cfabe5ae7e9f86

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkiptb8q33F1QeQth1sckPp6RTIjQR1:Lz071uv4BPMkivwSba1sv+aQR1

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 68c7d0c0a395ec497f3bdf3d1d6312d1af5612f2aace088cfe0f080dfb7569c3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections