General

  • Target

    2371a3003129acf7dfc32eab32b6526f59e6eef8f11ff446429b44cce60ece83

  • Size

    3.6MB

  • MD5

    ae9a68bf77c51da7f846b3b75bbf0f84

  • SHA1

    3b163f5f736e07f0664cfc8a05d423e21b4900ed

  • SHA256

    2371a3003129acf7dfc32eab32b6526f59e6eef8f11ff446429b44cce60ece83

  • SHA512

    c78d5324c7ef31d51ecf9e03facddaf18c54f7213ebf074773c9c7e091aac7f0de3d6be940bd1ad772dd6eaca41ed859572a0591396f4517d179efe47d8f3f64

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWl:SbBeSFkx

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2371a3003129acf7dfc32eab32b6526f59e6eef8f11ff446429b44cce60ece83
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections