General

  • Target

    d207505301bbe1c8f8f0bacf5392283781d972be68790580422d0c71988450a7

  • Size

    3.0MB

  • MD5

    73bab23ec03b95b36addd26eb2880d5e

  • SHA1

    1cea63965ef6f74fccbcd1d85bf2eb06fdc4c343

  • SHA256

    d207505301bbe1c8f8f0bacf5392283781d972be68790580422d0c71988450a7

  • SHA512

    f506abd73aacde3196818c7491c94336c0c3d3685d6c75ba33872e21bf08cf11b7b11b221443fcadc25265a582fa08bf4781f14807ec8423bfb9a9d644ab2f69

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5+Q6Y7:NAB5

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d207505301bbe1c8f8f0bacf5392283781d972be68790580422d0c71988450a7
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections