General

  • Target

    be414a9f824b6f60fad26cd4108fa8e90900a56c76be2d9eacc1547ec9779a7a

  • Size

    1.6MB

  • MD5

    43f253bab49da066bb2ff03856f08dc9

  • SHA1

    e17254188fac7f7265151ff12d93735f87ac6f1e

  • SHA256

    be414a9f824b6f60fad26cd4108fa8e90900a56c76be2d9eacc1547ec9779a7a

  • SHA512

    0a4fc5ab8ded6563f4daffa1623bc2a2ee178d42643258749c815bb8bb1451a163d2e8afd324101b784b458909e9c033125cbe0a29e12fab229d3ed79349d77f

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwViIO:Lz071uv4BPMkFfdg6NsIRSwViIO

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • be414a9f824b6f60fad26cd4108fa8e90900a56c76be2d9eacc1547ec9779a7a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections