General

  • Target

    09ffa13a143ed83bcd77242f06ec072b6606c18fe85a94fb2f2df2d8a93c29f4

  • Size

    2.1MB

  • MD5

    a05e49c0e2798b1ce2e866ed9c67d1b1

  • SHA1

    12480f3af4dccb823bf00e31b52f51e8902ca95a

  • SHA256

    09ffa13a143ed83bcd77242f06ec072b6606c18fe85a94fb2f2df2d8a93c29f4

  • SHA512

    f570e978390ef86815f7823105bb7e8c2ca60fe592932afe3cc256a207d1f922cf1e02b47a82cf40a6af03e7100edec3a5ef1b9a836edf2113b87da7486c1b2d

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTKUA2:NABT

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 09ffa13a143ed83bcd77242f06ec072b6606c18fe85a94fb2f2df2d8a93c29f4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections