General

  • Target

    e428f29574219990d430671fa767fc862a726d554ec5d84b2afe4c07f65fe3d8

  • Size

    3.4MB

  • MD5

    6f496f0dc24053179d0583b2de44f4b6

  • SHA1

    7beb2475c1fe24e1876d4e1d47f78354045e4393

  • SHA256

    e428f29574219990d430671fa767fc862a726d554ec5d84b2afe4c07f65fe3d8

  • SHA512

    8cac08f0c384c1f0488f297c2670453feabcc2f79dd9fd63219f0397adf97c743ec2e3f090db4f26ed3073709f1460c56ff2af594467ec8a65d3a45912e1b8c0

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWr:SbBeSFk3

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e428f29574219990d430671fa767fc862a726d554ec5d84b2afe4c07f65fe3d8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections