General

  • Target

    6cc96c7185575eccff40c890973b36356ba9bf7d022f1e52b698d895a01c8f07

  • Size

    1.7MB

  • MD5

    ef02088f897bf292254d25ef0424bea1

  • SHA1

    6f694d0bdcbac3a1815aeabf5472e15994fcbbb0

  • SHA256

    6cc96c7185575eccff40c890973b36356ba9bf7d022f1e52b698d895a01c8f07

  • SHA512

    573561dca6e56e1569e90d71be0c727100ec2cc24fe7735530b9e9bb3f3e9ac73548cf033682d22bf12247d9e2313fc6322618933ec7a7d6966ddb5f85323371

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupQF4g6FReQwUzN6Rf0eZzn:Lz071uv4BPMki8CnfZFOzeNn

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6cc96c7185575eccff40c890973b36356ba9bf7d022f1e52b698d895a01c8f07
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections