General

  • Target

    0a5778fd82f35da043c1bac538a0e92f0f31590d2bcaf38134c8b841ea3dc49e

  • Size

    1.6MB

  • MD5

    bbed084f6063431dbb5e3afdae4280d1

  • SHA1

    606202c0a1c84c5ee0ddbac146adaaf5c922ee48

  • SHA256

    0a5778fd82f35da043c1bac538a0e92f0f31590d2bcaf38134c8b841ea3dc49e

  • SHA512

    7f4842747c12997a53365c458fe3c5db5b247dbe7d9ba5cc26a103e6e3511f0f11312cbd29ab15f7dbc1367819119ddc2a57fe5ec734fe9a0a37bfa43cffd09f

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhMgQhCwbvj72hsuWBzHB1vLNkqSr6:Lz071uv4BPMkHC0INFWEWBNx

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a5778fd82f35da043c1bac538a0e92f0f31590d2bcaf38134c8b841ea3dc49e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections