General

  • Target

    eb6a5152f3c2397160a44305c78765a871d9ca875ea17a96cf524524f2e06ae9

  • Size

    1.5MB

  • MD5

    f88b3811cbca2f2eaef2d8faf2d04df0

  • SHA1

    4d6bd0313694e0b60f3170a0c903b7fccb1a9ab8

  • SHA256

    eb6a5152f3c2397160a44305c78765a871d9ca875ea17a96cf524524f2e06ae9

  • SHA512

    c69902fb50beeadbed339f9b5face3cd1e534c277cd55b18137e0c4f8e720652aec98e81bc5b923f3636681f15f2c84b4c6184ecedda3af2e6d638733ca30947

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgsU5qTqOkDilvq:Lz071uv4BPMkFfdg6Nsu

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eb6a5152f3c2397160a44305c78765a871d9ca875ea17a96cf524524f2e06ae9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections