General

  • Target

    b30f361ec39a71c8495d5e357c3dcdcac4422070cec577f7a316266121e2509a

  • Size

    1.8MB

  • MD5

    7c2eefca8040bec2b580bab7f3033263

  • SHA1

    d4d487b6a0f1f3edd52ea540d6ca90fa79b03820

  • SHA256

    b30f361ec39a71c8495d5e357c3dcdcac4422070cec577f7a316266121e2509a

  • SHA512

    41acd3dee53749efd0f63fe971313b47ae241863eb0ec95ad49d9c7ba1fd0208c16f146eeb8a35cee6405e84fbe97241eb999d88921c73aa8964c0b3fa6d3bcb

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtt:Lz071uv4BPMkibTIA5I4TNrpDGgDQ9vH

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b30f361ec39a71c8495d5e357c3dcdcac4422070cec577f7a316266121e2509a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections