General

  • Target

    b297375e8f6c9d91917906064ac8505460e851c555763bca638fcfe8fc7a2226

  • Size

    1.8MB

  • MD5

    3a1e3442f1970cd2a0fb60d31f0036bf

  • SHA1

    b7a87a4006901de6fde3f7195761d82305ce95c0

  • SHA256

    b297375e8f6c9d91917906064ac8505460e851c555763bca638fcfe8fc7a2226

  • SHA512

    7ce96df0aeee1e786b36d11a44b984a5f0867d0d145feaf80b7625416819b23a8d93a58989ec69c1ba2aa52ca302b801022710cf4e6a9f571f48c3f11a29af97

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCUATSU4HE1ltbDuekV:Lz071uv4BPMkFfdg6NsIRh4HE5eeU

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b297375e8f6c9d91917906064ac8505460e851c555763bca638fcfe8fc7a2226
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections