General

  • Target

    ba2e000b24a478a0362b3e08e0984924ab6e6eb5884926090cfbe7baf0befd53

  • Size

    1.1MB

  • MD5

    01ce63c37f7ff951b88d99503d28105b

  • SHA1

    269d49a135ea10794051a09438c56ea7deec949f

  • SHA256

    ba2e000b24a478a0362b3e08e0984924ab6e6eb5884926090cfbe7baf0befd53

  • SHA512

    b654a9bd1c070e0707cc989464468fefef62ff2fb29b06f2028d6ce65232a8046797dd3f4850ee3edabc32081b959c77a3b5bf8ba8196a34b47a02e02d7eda0d

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwxD4:Lz071uv4BPMkHC0IlnAi

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ba2e000b24a478a0362b3e08e0984924ab6e6eb5884926090cfbe7baf0befd53
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections