General

  • Target

    8a87a5aef67600ece92ebd2439e0162cf0752ebb5939d12b9e376fddece44555

  • Size

    1.7MB

  • MD5

    3f492b1e1ac2c2b2691fd5d4c1adf168

  • SHA1

    2cd60d5b291e71692182a1234fe8110741251a3e

  • SHA256

    8a87a5aef67600ece92ebd2439e0162cf0752ebb5939d12b9e376fddece44555

  • SHA512

    314bd27f599ad30eab4c59e54e8cb546432f0b7737bfc3adad4623b011989c26ec486624dc385f61b636f43602edcac4faff2ba50603909fa5fbcdc8d401d184

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZGRoeXGXqkQALu34bU/L3:Lz071uv4BPMkibTIA5JnsoyAbU/Tnn

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a87a5aef67600ece92ebd2439e0162cf0752ebb5939d12b9e376fddece44555
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections