General

  • Target

    a728aac3ec5a4e3f17d8184bf6b4214c635600c322bacbc12563b6b419e36bca

  • Size

    3.3MB

  • MD5

    c629e239e29dc13f68726bbd89842c08

  • SHA1

    e0a0a3798e5ee84144aaec0c05263c94c6aeb9fe

  • SHA256

    a728aac3ec5a4e3f17d8184bf6b4214c635600c322bacbc12563b6b419e36bca

  • SHA512

    52481395a45d95c8a87d1c66d34b84217ca96f9a1390aa179a94ab68d0413c5bad8a5996c328ab1fd5d62199dde9ba37ec281a5a1ab749be45cdaaf7e036c9f2

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWS:SbBeSFkG

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a728aac3ec5a4e3f17d8184bf6b4214c635600c322bacbc12563b6b419e36bca
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections