General

  • Target

    3fb5a888755195db10282dff024e1d1bd60edb2d4d57406e402b7647f71ee841

  • Size

    1.2MB

  • MD5

    3771b2e096f341b0f9aee32ffeb9e16a

  • SHA1

    0f2dde071277b330a9f481dd5ae52c22940f4492

  • SHA256

    3fb5a888755195db10282dff024e1d1bd60edb2d4d57406e402b7647f71ee841

  • SHA512

    5bcd03030120bfdb6056a0a66d9ab0aa302b38a479b5e7bb9af3e40a3bdb585350a3657486d3dbe134e3395f38e512baef926742cc1057d204bcd2ed2360ef55

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCt3Bbm6zzLA5JgLTCM0:Lz071uv4BPMki8CfVzz0yTW

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3fb5a888755195db10282dff024e1d1bd60edb2d4d57406e402b7647f71ee841
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections