General

  • Target

    8b7f21700d339b1f9ab2c3c9ba9c7c9c7731a2db79495558bad0cd4a3ced32ea

  • Size

    1.9MB

  • MD5

    241d65327d8269b081e5bae313c81a8b

  • SHA1

    711c1ed80656a5cd753438d414e0c603c0467e94

  • SHA256

    8b7f21700d339b1f9ab2c3c9ba9c7c9c7731a2db79495558bad0cd4a3ced32ea

  • SHA512

    46e707ec1dbef17b029a5c996501a9976dcb05ea60452c3f622cb846f5637aece8d4b8572b1874e61d40ede2a6943972da4e6f4c7181946ab44522c1a0ce4f10

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXH/jqUUAW:NAB8

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b7f21700d339b1f9ab2c3c9ba9c7c9c7731a2db79495558bad0cd4a3ced32ea
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections