General

  • Target

    60af4590c96dc100b549820f098d4dd21375afb8e0602a69e731793cabc2f35a

  • Size

    1.9MB

  • MD5

    34e028728ca4dc17b6358c439abb239a

  • SHA1

    699371139d47c7f0e1147bb93ec29b50fc3b0815

  • SHA256

    60af4590c96dc100b549820f098d4dd21375afb8e0602a69e731793cabc2f35a

  • SHA512

    572a1b4a387621e351a8babe4145f9d828bc2934133d6a9954d0c9dbb213240b119f90a63acc9507fd5de31021fa506a0c3e6c1b03f992e41ce635602e29078f

  • SSDEEP

    49152:Lz071uv4BPMkHC0I6Gz3N1pHVfyH1C76fOiS:NAB+

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 60af4590c96dc100b549820f098d4dd21375afb8e0602a69e731793cabc2f35a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections