General

  • Target

    334b5690199479212f67cd5df00bf7e63b7e5a5b29e64a46f5e54052ccbb8397

  • Size

    1.8MB

  • MD5

    14e043fabe2f4bc96f46c2a6b9f9ee0b

  • SHA1

    20cc799cc17ff7d1f75f19051f1832575b4ce5f4

  • SHA256

    334b5690199479212f67cd5df00bf7e63b7e5a5b29e64a46f5e54052ccbb8397

  • SHA512

    6e4c4d00a774a5e483c35b4a2e4a73fab3a078f8cfbcc942d23c4bcb9a20aa70bb68aaf33d22da4570e820d1035e791c04a1ef06430e1fc3557a13ae844b8d35

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFty:Lz071uv4BPMkibTIA5I4TNrpDGAVSqgi

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 334b5690199479212f67cd5df00bf7e63b7e5a5b29e64a46f5e54052ccbb8397
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections