General

  • Target

    1f7a0131e5b5815dbbf7e950910210a4ec7ca3e32c5c5b752584fd15728e25ad

  • Size

    3.3MB

  • MD5

    b17629c63490788c3f9907da8a8efaab

  • SHA1

    89999be086bb11a3a97bc9dac43dc848284b2fc3

  • SHA256

    1f7a0131e5b5815dbbf7e950910210a4ec7ca3e32c5c5b752584fd15728e25ad

  • SHA512

    c2ead71239437b8c9a9e286242f8888dda5eec4d9425e8010770e3cccaaeafa895ad26f5e0efcfc8e7253b276eea0b162db8b82da02f1728e2ffb74850cdd4af

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWH:SbBeSFkL

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f7a0131e5b5815dbbf7e950910210a4ec7ca3e32c5c5b752584fd15728e25ad
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections