General

  • Target

    bd2027380d2e5110636707d9ba21c459466a9680045c0355cadc5452c13d4962

  • Size

    1.5MB

  • MD5

    bb866d58102cf6ba8d3baad52135ed97

  • SHA1

    10452425222f00d8887772fcf005f3fe8ae0b731

  • SHA256

    bd2027380d2e5110636707d9ba21c459466a9680045c0355cadc5452c13d4962

  • SHA512

    18202a767a7fe47db0348527fa27888d699e0e8919cb9338f0a39f4de2d1c7e5b1797f39e97e8bcddcc666e94a8a8879a249832a7b665fd7a727ce1d5f512b85

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoY58SiAOkCVzQZ1:Lz071uv4BPMkHC0IEFToChvv3

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bd2027380d2e5110636707d9ba21c459466a9680045c0355cadc5452c13d4962
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections