General

  • Target

    65862c3c68afb98b53e3d7a931a35a9d34ae06e3039ea0c5c3faab62003e3081

  • Size

    1.7MB

  • MD5

    3742f67547ec0cef1b830a4d682325cf

  • SHA1

    e7ba910d082599a82e9f3fbbd43e6e90b4755e50

  • SHA256

    65862c3c68afb98b53e3d7a931a35a9d34ae06e3039ea0c5c3faab62003e3081

  • SHA512

    da3eeffa45c138a11759d21c8b2af9ad2c46235e21874ab942a152473329117eb2a09d71364cb5339b8e92dd2c68fa22bfaf36baee2cd1bc09c1e12f45584224

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCn0nrIYbcqhmYaMGLUHJLEXJ:Lz071uv4BPMkFfdgIZohteb5cTYxJ0

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 65862c3c68afb98b53e3d7a931a35a9d34ae06e3039ea0c5c3faab62003e3081
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections