General

  • Target

    66dacd9a599a46cd7be4519664c9f8e77cd1642707a21d13a45077a70efe5226

  • Size

    1.5MB

  • MD5

    eed0cdd9373c680f6a6f684dfc4ad874

  • SHA1

    4759c76c29a452507f4b0619f2b8514755119ce2

  • SHA256

    66dacd9a599a46cd7be4519664c9f8e77cd1642707a21d13a45077a70efe5226

  • SHA512

    f98f56f09da7a3e6575d3b03ae5302ba00defeaff17027581bb7916dd60e0a6a1835ee5285bd3f82a5dc7bbfe88e8dbd7ab5b29411632575100e58f295c0cd82

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYtgW+hVkVoC2BsQ:Lz071uv4BPMkHC0IEFToF3

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 66dacd9a599a46cd7be4519664c9f8e77cd1642707a21d13a45077a70efe5226
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections