General

  • Target

    c8c27db2eaf349f42ab12b7a06a014f5e6fe96549f1df7658d2c4c87fb34ec08

  • Size

    1.8MB

  • MD5

    4b68d456e2da9800b66f7199a185d125

  • SHA1

    2e902d2eb0a4d8a0435965da0be3b1aa13f6b75d

  • SHA256

    c8c27db2eaf349f42ab12b7a06a014f5e6fe96549f1df7658d2c4c87fb34ec08

  • SHA512

    23c537d0d8fdab7705bf1851df2da9f9fa007ab13eee640a47a2ecf59a69d6894d828a3ca320e548c2cdfffff04c2eb6a778cd26a31550782e8619d58e9e29a1

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VTa:NABv

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c8c27db2eaf349f42ab12b7a06a014f5e6fe96549f1df7658d2c4c87fb34ec08
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections