General

  • Target

    2bf800c0d10831e12c824aa8dee673a24cd0a2fac21c112a34e9bb977d38c4ab

  • Size

    1.9MB

  • MD5

    56841b32dd813448419856f8c372dbbe

  • SHA1

    92f44c66b88fc20b65bb21664b1ce1a5c82a890a

  • SHA256

    2bf800c0d10831e12c824aa8dee673a24cd0a2fac21c112a34e9bb977d38c4ab

  • SHA512

    de4a29d99dab65d82bd5737104928a6d31c3e6a6f0ea1d68bf7122a786b69239f760e84b8d98e640b9d5b5931a7500bb1f763e045a3c6bfce21cde751bbbb688

  • SSDEEP

    49152:T1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrSax91MkibTIDOk:T1ONtyBeSFkXV1etEKLlWUTOfeiRA2R2

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bf800c0d10831e12c824aa8dee673a24cd0a2fac21c112a34e9bb977d38c4ab
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections