General

  • Target

    928572362549684a5d727b10ffdab10ed46d4fe1e651414952c31fd520bf8414

  • Size

    1.6MB

  • MD5

    4d8e4f3e9a3ee9f75a38dde9bd5854de

  • SHA1

    aa3ede9582e86b03f0620e6b1ba083ceb3de25a7

  • SHA256

    928572362549684a5d727b10ffdab10ed46d4fe1e651414952c31fd520bf8414

  • SHA512

    a8d780efcacc0c9164a6fc03932c95d88e0f5b241009e80aad5c4f1981e1c13e1071aa0d893ed1d280657e934bf6a7df2355e64f68b0c9da7e8d7d7404cddbd4

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkiptb8q33F1QeQthKJAc+StNfNuUv6asC22iD:Lz071uv4BPMkivwSbaMrf2V

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 928572362549684a5d727b10ffdab10ed46d4fe1e651414952c31fd520bf8414
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections