General

  • Target

    eb58077c5511b8861e00d353745ccd6cf4f66d73b4f61d1b496616271aade47e

  • Size

    2.7MB

  • MD5

    53fdc39fecba268f8c70bd0f4652b64f

  • SHA1

    17b2b2795cc20b1a750974111364e90f276d2c46

  • SHA256

    eb58077c5511b8861e00d353745ccd6cf4f66d73b4f61d1b496616271aade47e

  • SHA512

    b5e7c493a8be8d275201e0de41ef6f2d7d19ac4ea7ef9e99f9a2d61834e209ab58d2bbfb46fe8651cac99838a626c34173901efd25248759dd20cf067e55e1b8

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6V9:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R+

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb58077c5511b8861e00d353745ccd6cf4f66d73b4f61d1b496616271aade47e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections