General

  • Target

    2a891860e0f0dcc54f596dae62e30acbc7a7e765c46673e74fd29f493524aec2

  • Size

    2.1MB

  • MD5

    77cc4401a536d1a63ec6b5bb02bf3dba

  • SHA1

    d4fffd11d05612a07c569e1c966a74f3cd617ff0

  • SHA256

    2a891860e0f0dcc54f596dae62e30acbc7a7e765c46673e74fd29f493524aec2

  • SHA512

    7729ec8e8d5a8b4d3fb6f2c10594cce129d16966ecbc166acc39da9956bb22dcd0bcd98927cd934f4a6bfd28bb58196df4d1f2774250f3cf77685594d9ff24be

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82S5k7c2lcA:NABz

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a891860e0f0dcc54f596dae62e30acbc7a7e765c46673e74fd29f493524aec2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections