General

  • Target

    e6082e6f45d018d233ae3b6e4684a1244c04b7228fb802ebdf94b0e7ee9d8060

  • Size

    1.5MB

  • MD5

    ab94afdece9877b381d2c3a7f5267d4b

  • SHA1

    1eb04b7c4d85bf4c7eaa968620c4b6b579c45fc7

  • SHA256

    e6082e6f45d018d233ae3b6e4684a1244c04b7228fb802ebdf94b0e7ee9d8060

  • SHA512

    07b186e3f11efe9efcd292157649ca38bac5a09792df9fcef5bf1cdfbfac1e6f3bd7568b07d1f6caa4a65934ffb3859ce89c05c3bf6bbeb1ef688725ef0e298b

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYV8zBgNCxXlZo822SI79BW8VNx:Lz071uv4BPMkibTIA5VOMCdo822p6u

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e6082e6f45d018d233ae3b6e4684a1244c04b7228fb802ebdf94b0e7ee9d8060
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections