General

  • Target

    2bb3309ed58f15c0ebb08c1aa934a1efd72386351aca2d9865493b63b7f62596

  • Size

    1.7MB

  • MD5

    d31b14e884783a7f3f7102df767d022b

  • SHA1

    035efb85ccc9470661e707b32d55d989769421e7

  • SHA256

    2bb3309ed58f15c0ebb08c1aa934a1efd72386351aca2d9865493b63b7f62596

  • SHA512

    1fbfdbd49ff292b66b20f659a00c4fcedb2f5dc342467293cdee5db177117fdb44dad01a5a70b6887d9966eb53505e4b6f02cca37175cb6e3bbe594b1ecd8faf

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupQF4g6FReQwUzN6Rf0jEZ:Lz071uv4BPMki8CnfZFOzwZ

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bb3309ed58f15c0ebb08c1aa934a1efd72386351aca2d9865493b63b7f62596
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections