General

  • Target

    ee664bc8fbf33b66e679d05abd42ebd7fa210365abef9a21854022bf10495431

  • Size

    1.5MB

  • MD5

    06d65d4a823c60913ac10392af4cb356

  • SHA1

    3138550f2f3aacb08b0129b98e96d723df222c9a

  • SHA256

    ee664bc8fbf33b66e679d05abd42ebd7fa210365abef9a21854022bf10495431

  • SHA512

    a0de3b7e5db5bb39e3e45ec6244a75204a5978214246013c6b3aed793a05b30c544ff08a957b49806fc7ff4d1e8c21f4a5122c017e1f4796888a93ce47cc512e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbGRQNqae/o:Lz071uv4BPMkHC0IlnASEx/RiNJ

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ee664bc8fbf33b66e679d05abd42ebd7fa210365abef9a21854022bf10495431
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections