General

  • Target

    a2ccef3ec30dbabe610c1f382a7b2b3976c3bda1f5143bf8358623d42c3d382c

  • Size

    1.7MB

  • MD5

    409f7bf305a678a84f5c94a9782b0799

  • SHA1

    d2969f978b7e4168a538d8153c85951890a4717c

  • SHA256

    a2ccef3ec30dbabe610c1f382a7b2b3976c3bda1f5143bf8358623d42c3d382c

  • SHA512

    157fb0b8750ed8a116229982b1901bbef64fab40e1b6662ee683f2b7c546f8be20a73d580f115cca0e3f7b26b34950a526dc8e1d7da25ffae624f21ba5fdc284

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbqoBQ0i1DFxCFaPejx2:Lz071uv4BPMkHC0IlnASEx/mi1D+F1yT

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a2ccef3ec30dbabe610c1f382a7b2b3976c3bda1f5143bf8358623d42c3d382c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections