General

  • Target

    3f13f955fe1ca333ae42b40f9b53d169b3694d8b7bd72ac742c06b27a2695084

  • Size

    3.1MB

  • MD5

    dd08e7ff52294b20b8eb6468ee3ddd39

  • SHA1

    0db99b85501039fcc59efd2e5f6b5223a3eb983e

  • SHA256

    3f13f955fe1ca333ae42b40f9b53d169b3694d8b7bd72ac742c06b27a2695084

  • SHA512

    1cea6b79453e783f99124b8780d55622997745e6b2860c34a8b36f5ee80e33aba7a1d739707e52b6fbebfea42483da9e1bbacba770812647249a289ca4c239f6

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWD:SbBeSFkf

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f13f955fe1ca333ae42b40f9b53d169b3694d8b7bd72ac742c06b27a2695084
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections