General

  • Target

    8074a25f69f5118ccef037a54ec54b0a1b2d279732e94b52b29c69f9c41a93c5

  • Size

    1.5MB

  • MD5

    24d7b145afa8883e649355b130de4a38

  • SHA1

    ac9e224d018b93e29fe671ff882bb6d5c70fed6f

  • SHA256

    8074a25f69f5118ccef037a54ec54b0a1b2d279732e94b52b29c69f9c41a93c5

  • SHA512

    14dc75eac6c85ea273d20bb515c3073b5089faaa1e90788b0ce0bf56768bf1a5b6aa4a87a49e8d83c1e000310d9d1b316a3189941571c66a71d5ca7ba71d209c

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupaXHeY5HmsoKTQXvaWDDJo9:Lz071uv4BPMki8CnfLv3zQXtpY

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8074a25f69f5118ccef037a54ec54b0a1b2d279732e94b52b29c69f9c41a93c5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections