General

  • Target

    37790397aaf3848307dc2efbea56a56a115fc1c5d698226de194b132c478cd4e

  • Size

    2.3MB

  • MD5

    236e635fca789c93c0b81ba429caaa48

  • SHA1

    33ccc6f00838f229eea614d70b8780360446ef2e

  • SHA256

    37790397aaf3848307dc2efbea56a56a115fc1c5d698226de194b132c478cd4e

  • SHA512

    22e82f23a3e55447db285a9de4dd03c0365524a4bfe184c8d6aa178a25d0dc59326d48cc5dc94ab56cc8ea94bad3967d9519bcee14ec4ad65024e3e3aa7a1191

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cRbtYb:NABQ

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 37790397aaf3848307dc2efbea56a56a115fc1c5d698226de194b132c478cd4e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections