General

  • Target

    7625fe44573603fedee12df0a68f124732d8ec5fcc71a44216eee426ef27e8fc

  • Size

    1.2MB

  • MD5

    145ba93f9e8f04804c21f71d0c2ce623

  • SHA1

    874574e78eb9bc85b2c6a8e7ab3e597d6381c1a6

  • SHA256

    7625fe44573603fedee12df0a68f124732d8ec5fcc71a44216eee426ef27e8fc

  • SHA512

    779bc992a741aa70d519273ea8e9e4ff66799a71f52a1c37371d54e9f7c68e876349ae38936abe371d5cde7f5a816d95d017f8cec068cba00a2b82de96b53cc1

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGqb5rpW:Lz071uv4BPMkibTIA5H

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7625fe44573603fedee12df0a68f124732d8ec5fcc71a44216eee426ef27e8fc
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections