General

  • Target

    d526048208eebc96afb0fc45ae07a08be20d1315fd17bbde26e34a418a8761ba

  • Size

    3.3MB

  • MD5

    686c4bb00df117be917bb3e5807e8538

  • SHA1

    652811b7a6d93bbe831de1e9be348865c09bda12

  • SHA256

    d526048208eebc96afb0fc45ae07a08be20d1315fd17bbde26e34a418a8761ba

  • SHA512

    1ef75296ed5383f5cfb6533d8b3ae6fcd9199fbac24ab27358151a49330d2ee6fc1c96a3805da2acef7817a7472f797c9eb3a5510749c4d0fb031de11036b8b5

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWn:SbBeSFkj

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d526048208eebc96afb0fc45ae07a08be20d1315fd17bbde26e34a418a8761ba
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections