General

  • Target

    808dc9f2ead8ad6a4e669a9611c0db2bd86e6eb3e7f24d0305b9f8206963748c

  • Size

    1.9MB

  • MD5

    fb68311233d39d1b8f7791eff764fa34

  • SHA1

    e67f83734c0038230c56a04fc47d1175b81af013

  • SHA256

    808dc9f2ead8ad6a4e669a9611c0db2bd86e6eb3e7f24d0305b9f8206963748c

  • SHA512

    bd99d3c0a3db3afa39b04c18d8f4c19c1a1f4449745e5fc36a6db74e11fb4ba1855e66f4af7f37c81a3f23db29ea7ea074c6face5286b1fc61ca2d6189a7e139

  • SSDEEP

    49152:Lz071uv4BPMkFfdk2auTqao/c/3KNIefX:NABk

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 808dc9f2ead8ad6a4e669a9611c0db2bd86e6eb3e7f24d0305b9f8206963748c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections