General

  • Target

    88029ace81af0501dfb694ec71defa010d2b197495f44cc51daf7bf756e94e78

  • Size

    1.5MB

  • MD5

    168953ff2cbb8ff4a0f3b0ef612ab41e

  • SHA1

    3f8da8c0eb92e509dafbf15eee5f8dc24ed78e0f

  • SHA256

    88029ace81af0501dfb694ec71defa010d2b197495f44cc51daf7bf756e94e78

  • SHA512

    df69944097edf4283e600dee84290a74bf44b7f4fdf192fbcdb1da419e056609dd7383f523ca5b6508db6990a1a06f75edacfa449c676fdb43b6d70306a483dd

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5OaD8VAEDzfJyk8K4qVwj:Lz071uv4BPMkyW10/w16clf8Jqw

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 88029ace81af0501dfb694ec71defa010d2b197495f44cc51daf7bf756e94e78
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections