General

  • Target

    065df7f662bc2ddd710cd8e3d9eb8796b0ca6c8c54e78cb90bc528fe293405af

  • Size

    1.5MB

  • MD5

    94ee11eed3e0bcdd2d655f51594c8d7d

  • SHA1

    f7a51a29715329fd33447f0bb3cc130fbee29526

  • SHA256

    065df7f662bc2ddd710cd8e3d9eb8796b0ca6c8c54e78cb90bc528fe293405af

  • SHA512

    d728e612c3799e665cf488e9ee2f1b3c456704ecde0e4385c513d35a52809afab76d6826bbf4753735589712008fb1ab448970fa69a299b66e3c5e7463bd673e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvj7NaVNqd9OeSZXCdzvd4/iooIXls:Lz071uv4BPMkHC0IaSEzQR4iRn

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 065df7f662bc2ddd710cd8e3d9eb8796b0ca6c8c54e78cb90bc528fe293405af
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections