General

  • Target

    94400b05a65d6a4f0403fe59dff3698fccd8ec5764a23b2cff045c51a623173f

  • Size

    2.3MB

  • MD5

    1ecb3a8b57cc2fe3d1b6c5884ec2933e

  • SHA1

    312d4ff5049c15b39ac8515835d90d274c87a894

  • SHA256

    94400b05a65d6a4f0403fe59dff3698fccd8ec5764a23b2cff045c51a623173f

  • SHA512

    c09b0b7ecec719c46e9e6f5bd840f9b36eb468360f14736bc6a48994b3169cda6ac8494737fa4d14c7565f3e98c66ffdfc39c1db8906c4d177797f01c9d30ee8

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//RW:NABM

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 94400b05a65d6a4f0403fe59dff3698fccd8ec5764a23b2cff045c51a623173f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections