General

  • Target

    94c5c9d11fe964820616a28b7befbd567c50bc123f0888a20a588389b2ecd665

  • Size

    1.2MB

  • MD5

    af2b2da1b710827dfbff94495aa7ed3f

  • SHA1

    63f3d4b79ddb7ecf11ae3b1e65de297cad245aa1

  • SHA256

    94c5c9d11fe964820616a28b7befbd567c50bc123f0888a20a588389b2ecd665

  • SHA512

    31982e9a939efb687595dfde875d6a3d993e94b741c7178ad5086b7690afee50ace8bd64690a3e6a214270d8b7c552a7ad6c9f6241972008f508e9bb3173d863

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjpbc8ZQs+8//w8V1:Lz071uv4BPMkHC0IBchs+Ar

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 94c5c9d11fe964820616a28b7befbd567c50bc123f0888a20a588389b2ecd665
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections