Overview

overview

10

Static

static

10

31d477c212...b0.exe

windows7-x64

10

31d477c212...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    31d477c212b99252be77fd3a85bcfabec0717329aff23445c6991844fedbb8b0

  • Size

    1.5MB

  • MD5

    ef4abb264e9388ca567fb0bad59abb9f

  • SHA1

    0a875ef08b8a47ccb3f278f0d8ae27b0b6cd245b

  • SHA256

    31d477c212b99252be77fd3a85bcfabec0717329aff23445c6991844fedbb8b0

  • SHA512

    f34d904cb4b826ae79d75a692eccc1c1faf74d3b19e1d453d159fec43f0d91d5cf66758e2c20035d733bffe2f7f29740a378397aa6464e9204e8ec7cc311ad12

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYBLIgBCDDcljfmoyxW8GMm3P3v:Lz071uv4BPMkibTIA5tIgcHS/8G/

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 31d477c212b99252be77fd3a85bcfabec0717329aff23445c6991844fedbb8b0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections