General

  • Target

    eed7416cb32e52d8acac880514088c814f00bb7201a74ffbd5bef12a7a2083e4

  • Size

    1.9MB

  • MD5

    b99fe0bb0ab199b0dde141584976ab4b

  • SHA1

    02527ff9104fb372221d241f48a5a943bdf5103f

  • SHA256

    eed7416cb32e52d8acac880514088c814f00bb7201a74ffbd5bef12a7a2083e4

  • SHA512

    cb8e8b2644d93c5308bb230a23b92e4707996e8f482bb7950e6ca1d3876d3b694acdbc932b57df022315ee3ef5fc0b7a07ad81b68d3ac52b020f3ecc468bc017

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHqov9b8pII:NAB8

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eed7416cb32e52d8acac880514088c814f00bb7201a74ffbd5bef12a7a2083e4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections