General

  • Target

    e867a03802efd8c72aab993f0e7a9b01bbfc5821bfb3c854389e4028afb7f1c5

  • Size

    1.9MB

  • MD5

    56803a8c2ff143b8bd2640ab6009cc2d

  • SHA1

    d3ca50394a272708f2cd174cdff0cbf9cba2af53

  • SHA256

    e867a03802efd8c72aab993f0e7a9b01bbfc5821bfb3c854389e4028afb7f1c5

  • SHA512

    4fe112ac23b1ec13219710411d4ddd351e2ad97013191b1891f293dc717f3f6b048513481ea20f89e43c8109c188de0c4098db5b4e449ddd1f9329a1494149aa

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCnfJCwCc4MAKFpMloooIXUyQ:Lz071uv4BPMkFfdgIZohteLMxRJJfv

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e867a03802efd8c72aab993f0e7a9b01bbfc5821bfb3c854389e4028afb7f1c5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections