General

  • Target

    9d8ef25cb3dbe395ae36b27541a9dffb276b536d970af25f1f50c5dd90b9f269

  • Size

    1.8MB

  • MD5

    6097e30b2ac2fed5f9cba24024f86482

  • SHA1

    29ffb853a176b979f5cda7a6f6669c204d8ca11d

  • SHA256

    9d8ef25cb3dbe395ae36b27541a9dffb276b536d970af25f1f50c5dd90b9f269

  • SHA512

    41b64c1c36e5113d46a384db42d16f1af97333f506e8c6ef010fccc9ca2f6d70dc93a3821ee591677bd47604ba061056cf7848a076082c72259b27bdae0597da

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/Vx+hZW0VGeE5l7Qry:Lz071uv4BPMkibTIA5CJJAbEP

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9d8ef25cb3dbe395ae36b27541a9dffb276b536d970af25f1f50c5dd90b9f269
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections