General

  • Target

    c269ce9d8aa041591891038a78f66b031c47cf93a782efe426fe36fe53906028

  • Size

    1.6MB

  • MD5

    a865dfd1209493fc5e85305ea180fa5a

  • SHA1

    908a532669674324a642f996bc0882f4bfbc1da3

  • SHA256

    c269ce9d8aa041591891038a78f66b031c47cf93a782efe426fe36fe53906028

  • SHA512

    d788cdc3525d52ee5dee94bda4eacb37bbb1437bbdcf1afbc543803f074f9cc2e49909356ff46a5b59faaa35b411bd60358c23f85d7280466d9b161e5a2901bf

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvj7NaVNqd9OeSZXCdzvd4/iooIXsLq9Uab:Lz071uv4BPMkHC0IaSEzQR4iRLUUaazY

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c269ce9d8aa041591891038a78f66b031c47cf93a782efe426fe36fe53906028
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections