General

  • Target

    8cfb3704823b87902ffd74a72856e8a68054ac5b318e12ed5342837f378da375

  • Size

    1.9MB

  • MD5

    171aecdf9956e75d68cab133ee7e6395

  • SHA1

    4531e8cad6bc7e9a91cb192ae8c387f4e5285ec8

  • SHA256

    8cfb3704823b87902ffd74a72856e8a68054ac5b318e12ed5342837f378da375

  • SHA512

    96d59fcf5f97cf4b99a7035e4520f19bb4f79326b397eff4fa0cc38d300f809d89b5f370a589a6ef478b64fd7e41e0947f467da8550d34ee079e577746ebb29a

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SJRwd7s:NABs

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cfb3704823b87902ffd74a72856e8a68054ac5b318e12ed5342837f378da375
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections