General

  • Target

    a33ba0368ebefc626c7690f1361b635c8a3d311db714123989168361088faa44

  • Size

    1.4MB

  • MD5

    10b1d8ccd49c6ec00ed3cb009321a08a

  • SHA1

    99e600ff7ce7cf6861a47a8114e02d76238e52ad

  • SHA256

    a33ba0368ebefc626c7690f1361b635c8a3d311db714123989168361088faa44

  • SHA512

    2f2e072cf21b5a32cb00768be6a4ede9eeff57df19cf9ea2c8fba29914fcfbee7ff03cac9128e64ef3492dcd386cfb24063d463b983d90a1c56871f13041cacf

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY3W7qE8TrWhBya+l3a+pH8TOOX:Lz071uv4BPMkibTIA53WjoWya+lK6HwX

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a33ba0368ebefc626c7690f1361b635c8a3d311db714123989168361088faa44
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections