General

  • Target

    3b2e24fc18d807fec41d693bac50d81bb555aa351f375f6ace01726ed822f17b

  • Size

    1.6MB

  • MD5

    566280a1352d4a7239a694016d54d386

  • SHA1

    1444be179959eacf527c2d4d32fbc7ebcc27da45

  • SHA256

    3b2e24fc18d807fec41d693bac50d81bb555aa351f375f6ace01726ed822f17b

  • SHA512

    dda3ae404425d163719133554dcd242163df1ee080b0b06f7456d7d6fea04d62f3c1f8ad8fe5084aeac0b99a7c6d07c3a6d1b697424c1bc74e6d0c7e7bf339bd

  • SSDEEP

    49152:Lz071uv4BPMkyW10/w16BvZ+I8RvjTqTQk:NABm

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b2e24fc18d807fec41d693bac50d81bb555aa351f375f6ace01726ed822f17b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections