General

  • Target

    e32463f980ba3c7c6cde4306652d470ce4ac8e0d3d80ff50df42261fe7437c9d

  • Size

    2.8MB

  • MD5

    9fdf1c31a2d2e8b3a44450f3a963fe2e

  • SHA1

    2bc4ff91b2e2cf8b421603b51e237a142e2edfe5

  • SHA256

    e32463f980ba3c7c6cde4306652d470ce4ac8e0d3d80ff50df42261fe7437c9d

  • SHA512

    f8facd68b4a3bfec27beb328b6ee7ec43b4fcc6d35b79414b6660be89a924659568d2d4a2dfef68a5caa73f4e40f20968598c6518115143e0706bb1f40a63908

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5VOMCdo8F:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R+

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e32463f980ba3c7c6cde4306652d470ce4ac8e0d3d80ff50df42261fe7437c9d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections