General

  • Target

    2a82549dfa74fa2280bee75a4ff533cb1d65a2d44ece9cf8de42d1073c0ff9e8

  • Size

    2.5MB

  • MD5

    ccd4e5c9acf7c4e4f6cf7ab6a5a1cbd1

  • SHA1

    6eea2c1813d8b9d82b6e0cfcb3f2b2e1bfd2b47a

  • SHA256

    2a82549dfa74fa2280bee75a4ff533cb1d65a2d44ece9cf8de42d1073c0ff9e8

  • SHA512

    53458e966371b051974b3e1be8ca775115eedda13d2b66543c53538be34a4662ad144513929b99952cd268c865e65f4b05e7186faeef89c57eaa76baa98dc5ea

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0I6Gz3n:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rt

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a82549dfa74fa2280bee75a4ff533cb1d65a2d44ece9cf8de42d1073c0ff9e8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections