General

  • Target

    64b8fb9954fea397bbe193454f3d1569b0a883bc5b83eda81b1ba3b13c2d7459

  • Size

    3.1MB

  • MD5

    31c0a7b117ae90127615fece32868574

  • SHA1

    ae0097a02768c04e6078cb22c0ea500913642603

  • SHA256

    64b8fb9954fea397bbe193454f3d1569b0a883bc5b83eda81b1ba3b13c2d7459

  • SHA512

    ee554f3a4289fb9eb259858014a03d9660ff8fe3e958610753bf466d3f838f9c19c77891486c0c84a4ee8bc9fb2526e6fa12efecb0336e3accff6eefb44bde80

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWL:SbBeSFkn

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 64b8fb9954fea397bbe193454f3d1569b0a883bc5b83eda81b1ba3b13c2d7459
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections