General

  • Target

    907f885bdb9c0a3dfbdba89f7428d319ef6c0cbc741eeec226c9aafd4afe7cab

  • Size

    1.6MB

  • MD5

    72b75b43506e9cd665e4939b42c22a42

  • SHA1

    10c0ac496629baefc911623bcfe3091e5c8d28ea

  • SHA256

    907f885bdb9c0a3dfbdba89f7428d319ef6c0cbc741eeec226c9aafd4afe7cab

  • SHA512

    e42761f1e036c04222c2c2fac20d31fde3d4c4d0fdc3b843e93c1a25e1630614c1cb2427a5d89ac3cf727a8ca42ae7a33ff8744252466d9d75c086ebe78dd552

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoY58SiAO+9rUGD4:Lz071uv4BPMkHC0IEFToChvLq

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 907f885bdb9c0a3dfbdba89f7428d319ef6c0cbc741eeec226c9aafd4afe7cab
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections