General

  • Target

    bf7811ed8d479bb3738059aa9c043bdefa89f914926c533697b59d189a86ef74

  • Size

    1.7MB

  • MD5

    27583509c5768cedd3b7f42e8a3a5e9f

  • SHA1

    e75a27a15851ea4a8be7752ffef2e88de0c0d92d

  • SHA256

    bf7811ed8d479bb3738059aa9c043bdefa89f914926c533697b59d189a86ef74

  • SHA512

    ccc2aa19a8b94508048758347e09f369966f5ec8ef314be17c2a202f96020fac8835991f60a67215eb7f0d50676b28af3b2609103de3d08b6a95369549724a5b

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYtgW+hVkVoC2NCNP:Lz071uv4BPMkHC0IEFToF3aWE

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bf7811ed8d479bb3738059aa9c043bdefa89f914926c533697b59d189a86ef74
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections