General

  • Target

    1797f791ba74d69528831da248bcbe2adcfaf6c66387edef80b63b67dbb0725b

  • Size

    3.2MB

  • MD5

    421632ec9cbe430857344721788154d6

  • SHA1

    358fe1732dff2251b86384fb6c0d66dcf26852b8

  • SHA256

    1797f791ba74d69528831da248bcbe2adcfaf6c66387edef80b63b67dbb0725b

  • SHA512

    50b700fa4ce987dd2dd568725f597804789d5c2700bff946000830c14bc8d6d468bfa4c4af6f55fa6a15036b9c1fa87260bd98805769aab75e1f7e53700676ee

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWF:SbBeSFkp

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1797f791ba74d69528831da248bcbe2adcfaf6c66387edef80b63b67dbb0725b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections