General

  • Target

    e20b1846b88edba894918fcbb24edbc32c2123b8bb0737d7fd0ed3eef31953b0

  • Size

    1.2MB

  • MD5

    56767376bc0beb9c4264615cf29ae1a8

  • SHA1

    9752f3d1384da3a47e9be48b3f7e24968f6421f2

  • SHA256

    e20b1846b88edba894918fcbb24edbc32c2123b8bb0737d7fd0ed3eef31953b0

  • SHA512

    de3e065c6a0955b3ddf0e29024df2f0c0bce85722bdff9e00754bf817355596abb3990200c9abc61886c3c767b408536007919aaa12edcd59b271a968e1609e3

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipctp++Ft4mzS1jRaJSe:Lz071uv4BPMkiqtI+ijRu3

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e20b1846b88edba894918fcbb24edbc32c2123b8bb0737d7fd0ed3eef31953b0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections