General

  • Target

    77786705fea08cb12c35274913e516487b956eaaf088daa37b88f377dfb46358

  • Size

    1.8MB

  • MD5

    140a5914507f67f78b161c26634a09df

  • SHA1

    1f15a9010c6c9b90e9c88bc04302a2983892e594

  • SHA256

    77786705fea08cb12c35274913e516487b956eaaf088daa37b88f377dfb46358

  • SHA512

    a11d717969e1faf90f8354d1f80b6d0e140781b3a0fc2102a214a429daf88b57122faedf5c83ab96f30056d166c6fb89f4abf69824463ac330e87049ca94cfbe

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYCB23XYp53yrVMDW:Lz071uv4BPMkHC0IEFTon538gtE4E

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 77786705fea08cb12c35274913e516487b956eaaf088daa37b88f377dfb46358
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections