General

  • Target

    85669abcebee0a385cea5ad04636325581a55c4c02ae48271d2a042251eef020

  • Size

    1.7MB

  • MD5

    c21bbe63c701c2359d9c161b21d33a49

  • SHA1

    43941100ee5e00804d6c9434fd9ef3981cd6ab07

  • SHA256

    85669abcebee0a385cea5ad04636325581a55c4c02ae48271d2a042251eef020

  • SHA512

    d2e59e9ab7235e16dadad8164dbd0cd130de6da9231e03a64536c1b7f5c5b9e9daa7351bd90e41152cf9afd28d9c61ff8f9fe2f082f5b9838dfeb117af94346b

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdUK6S1uBkJdyFPNZmfsCJgilX4:Lz071uv4BPMkHC0I6Gz3N1p3EZmEagSo

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 85669abcebee0a385cea5ad04636325581a55c4c02ae48271d2a042251eef020
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections