General

  • Target

    3ee04ccfa9e324bb0279e6bffffd91669a8409e9f677aa17a74aa2e2315ac70a

  • Size

    1.5MB

  • MD5

    2b9a925c8bf24a655b2e75e49b8ae2e9

  • SHA1

    1b89214b1ae8cd9e1403504416495a7239a385ba

  • SHA256

    3ee04ccfa9e324bb0279e6bffffd91669a8409e9f677aa17a74aa2e2315ac70a

  • SHA512

    a1087116d68c9f091c29be48493b775524868bfdceceecf183308d8858de970487a7e4417d6c36003292ade55adbe2e781d26b8e16c061964898bf71a0e2f74f

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdUK6S1uBkr5Gqlfz+yfltxs:Lz071uv4BPMkHC0I6Gz3N1pHPK

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ee04ccfa9e324bb0279e6bffffd91669a8409e9f677aa17a74aa2e2315ac70a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections