General

  • Target

    be3a9f748965a262f864cc15d33b9924697eda79dbf04b4f74f653bf0f63220d

  • Size

    1.8MB

  • MD5

    55a0cc49c45508b07a93411eb61c1e1a

  • SHA1

    14991215442fb9ad933ef7793f181d6b8a8c7792

  • SHA256

    be3a9f748965a262f864cc15d33b9924697eda79dbf04b4f74f653bf0f63220d

  • SHA512

    686ceb61341e3aa45f0b8a220841d1e986ac48cad753357037bff8f819ebc5271dd47691147e7cece49c45c09153c56adcf18c5f04c832644f47e12fd8add361

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCnfJCwCc4MAKFpMloooIXruR:Lz071uv4BPMkFfdgIZohteLMxRguKo7

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • be3a9f748965a262f864cc15d33b9924697eda79dbf04b4f74f653bf0f63220d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections