General

  • Target

    b60b8f03fef9c873e151965ab1ee6d6d6d0653489ff472f0e0b4d50689508df3

  • Size

    1.7MB

  • MD5

    31b69f1c9aec1c3da39f70a47b3709c4

  • SHA1

    aa23185ce7f44a8040c384286d7440c83c87a1b3

  • SHA256

    b60b8f03fef9c873e151965ab1ee6d6d6d0653489ff472f0e0b4d50689508df3

  • SHA512

    df649876515b24553a1fdbd28a775758ce4de4b560ebb824ec968d995a02fdfc16b89cf1c92e13bd60bec96e1888a33cb1f3d8b6fe47982b033e64502c834cb3

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCnfJCwCc4MAKFpMlyapbkvT8:Lz071uv4BPMkFfdgIZohteLM0kG1DV

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b60b8f03fef9c873e151965ab1ee6d6d6d0653489ff472f0e0b4d50689508df3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections