General

  • Target

    d77e9e6ae754959784404bd37ce92a56e4bc8ec107cc0fcbe11a30a2609df3ea

  • Size

    1.3MB

  • MD5

    e6d3e225b0295a3aa134bf64f65f1828

  • SHA1

    d710e9696b587937c6049efca079626db0926972

  • SHA256

    d77e9e6ae754959784404bd37ce92a56e4bc8ec107cc0fcbe11a30a2609df3ea

  • SHA512

    2559d1753e8fed316ce33f400d2ab08c760078b5f09994dc29c48b9de6a346a4c6c74930db08e7d7355c970a260d1b2f03859a741dab22ca6b44a27d0ea2740c

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PxtG8PEpklLvYl8UywjwCIlaa+eCpp/:Lz071uv4BPjGhql0lQGQBC3/

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d77e9e6ae754959784404bd37ce92a56e4bc8ec107cc0fcbe11a30a2609df3ea
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections