General

  • Target

    46a39fb65f55ae3c8dd42fbad23e7c03c529b11dec95dcf6a1cf47ef6cb2133d

  • Size

    3.0MB

  • MD5

    51db96b3cdaa0d0301e36a07aab530ae

  • SHA1

    82a1ad9ce742cfad4e3ffcd33b96200797aaf588

  • SHA256

    46a39fb65f55ae3c8dd42fbad23e7c03c529b11dec95dcf6a1cf47ef6cb2133d

  • SHA512

    5e8637406fb0dd065eceffaebe5f403c807cb6b24c4cecf153ca63bede29c36e97ab86b67becafa1ac7fce13c438d349ebdb6a4b6a24dd20ef90b12f48f996a5

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWJ:SbBeSFkl

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 46a39fb65f55ae3c8dd42fbad23e7c03c529b11dec95dcf6a1cf47ef6cb2133d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections