General

  • Target

    695c6b0c33b06d891beaebf4bca23c1f8feb7e440c5a829fe2dad7c3fbc7f0bf

  • Size

    1.4MB

  • MD5

    999a1bb9feab2a54d1e207f88134b07d

  • SHA1

    f9e3df43765422c87e9a3340a624273cee71fb9a

  • SHA256

    695c6b0c33b06d891beaebf4bca23c1f8feb7e440c5a829fe2dad7c3fbc7f0bf

  • SHA512

    62f8758981e56b488aebd79e84f6ae5c92da4d9d7851948bd26078d5f03aec60918a5b8b0289de149bd479f15898a88d5fc69f8d1ea9c2adf989a11e32c0bda0

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1+nNlnJ5g99JzYXz86Pmau9:Lz071uv4BPMkyW10/w1+x5iVaY

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 695c6b0c33b06d891beaebf4bca23c1f8feb7e440c5a829fe2dad7c3fbc7f0bf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections