General

  • Target

    87614654c39d978004a0c7ec774d7398509f1cdf30cf4c1a636d56b34ff43fc4

  • Size

    1.5MB

  • MD5

    92d6d8eec9c0e25cfac943374e84e3f1

  • SHA1

    32a9468048ccdfc638077cdd28a1c2c3b55d7f0d

  • SHA256

    87614654c39d978004a0c7ec774d7398509f1cdf30cf4c1a636d56b34ff43fc4

  • SHA512

    924098a56770ed565972580729826a1d41d5db13496e1a5c18ef9a0d6c06510c5af4903b1552d015e194aa95816f755259960ff64ca39cea8ba82e73d16a4aaa

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgsU5qTqOkDilKuAJg:Lz071uv4BPMkFfdg6NsmuH

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 87614654c39d978004a0c7ec774d7398509f1cdf30cf4c1a636d56b34ff43fc4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections