General

  • Target

    8ddf9dc32f88df3241c9a9efe0136d32fbdafb869037101807cc80344869b71c

  • Size

    1.4MB

  • MD5

    07105df0d5fc2fb6dcc827e2d30e46d3

  • SHA1

    12533678610c640ca1f58473cf0fa789af7e31e1

  • SHA256

    8ddf9dc32f88df3241c9a9efe0136d32fbdafb869037101807cc80344869b71c

  • SHA512

    5c2f804eb8ec10602d4b94cb84ba67208935efddee2678d1e14c51edeb8d706362a1e523da5a264e5bd97ac7ddc919adbc710dbec2e528e8d415e1a77f36818f

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYMYXQQLFVfxKYLw2rn22:Lz071uv4BPMkibTIA5BXH6wrr22

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ddf9dc32f88df3241c9a9efe0136d32fbdafb869037101807cc80344869b71c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections