General

  • Target

    3c68841820bf40024fcd9896f0fc9d0404fb203a1906998d51edbe64f1b40ae0

  • Size

    3.6MB

  • MD5

    99dfb4a05fd4536b33f2272715b77375

  • SHA1

    e5a45e26bd4f9141ba221bb49bc9c3a934cab40b

  • SHA256

    3c68841820bf40024fcd9896f0fc9d0404fb203a1906998d51edbe64f1b40ae0

  • SHA512

    54f0a2aa45cbd46de40543c04b82e7320dcbc5830799be6f112e48f0f8c5f758abbd32ca759c09007c08f2014b4d58a1629b9fb5efba622a7bd4b17063947a2b

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWm:SbBeSFkK

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c68841820bf40024fcd9896f0fc9d0404fb203a1906998d51edbe64f1b40ae0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections