General

  • Target

    2b63abf2debff1968ea3747676f20e31a9120cf11df0e1205d7c9b4fc22a2408

  • Size

    3.7MB

  • MD5

    197039dabef9dd564d0742597430ec4f

  • SHA1

    15993fc472e2292e956965c803c881e17201878b

  • SHA256

    2b63abf2debff1968ea3747676f20e31a9120cf11df0e1205d7c9b4fc22a2408

  • SHA512

    857f9220190adc58e28f2097344be648bae59cbb70da87ba6b67d25dac3cac88de59d4bb9fa3b6a4ec34bb4abf1f5ae19b4e804f76a06df966b6b66e6c3ce34a

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWJ:SbBeSFkt

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b63abf2debff1968ea3747676f20e31a9120cf11df0e1205d7c9b4fc22a2408
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections