General

  • Target

    c7cb933fb913482e1fbbf27af55611e797d6f53c52dc2f27743e09430a1e2084

  • Size

    2.4MB

  • MD5

    cc61ad2149077f52a0db3ac2667d5776

  • SHA1

    5ad54c97015b51f538813ee4219d1c22d63fe5ff

  • SHA256

    c7cb933fb913482e1fbbf27af55611e797d6f53c52dc2f27743e09430a1e2084

  • SHA512

    c858c1d4d56a14a01803ad761b8e499fc8b0b8994d54c23b562d3fe99dd6fffad535e147fc5a0e504952618c925a6fc44fb9663963c198104e0618fe2a378e81

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16lIP+dD:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rh

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7cb933fb913482e1fbbf27af55611e797d6f53c52dc2f27743e09430a1e2084
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections