General

  • Target

    8ecc8817b2592f7c31eba85f25aaec44f45065ef9e6be91393c16adafa7ca0d2

  • Size

    1.6MB

  • MD5

    38510d83fe9e2fbafa1ed5565013c60e

  • SHA1

    247d7ba2c441e31783c000f74da6e342523016df

  • SHA256

    8ecc8817b2592f7c31eba85f25aaec44f45065ef9e6be91393c16adafa7ca0d2

  • SHA512

    8d5f646542a0b33974705348bc5df0fb90dea3d474c56f08caf2cdc7909fb89f6f6caf8bf23721a9dda4a86b6c2a3b8befe42e4cb8285fb80ca06a8d1a27572e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoCSxnhvuqAP9dbWmbOt0BXdnyv:Lz071uv4BPMkHC0I6GCInhG1dtdFo

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ecc8817b2592f7c31eba85f25aaec44f45065ef9e6be91393c16adafa7ca0d2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections