General

  • Target

    40fee766b89eba5a91e693aaa50db62f97093c3ad70d380123a2a5408e17f619

  • Size

    3.0MB

  • MD5

    8dbd540e1846a8e05b97099256ae78b2

  • SHA1

    a14fb66aa4fcd22ba78bdbb9982f6117a81bbde8

  • SHA256

    40fee766b89eba5a91e693aaa50db62f97093c3ad70d380123a2a5408e17f619

  • SHA512

    a2380f41eddff6a448e3d29826dad07008da9e061395b8b099bc57b98d66cfe38b01854f6bf6b7c7b951af8a049ef6dbc26259d227d1e8c447af46461e7990d0

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWP:SbBeSFkr

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 40fee766b89eba5a91e693aaa50db62f97093c3ad70d380123a2a5408e17f619
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections