General

  • Target

    8d2d6b4d7537a920b45ed9db1a34de74127b3c5a8a45f2c6f7a7bb04c06ad194

  • Size

    2.5MB

  • MD5

    8fe2cbe133b1aa933f45c92b3c2649e1

  • SHA1

    9fc5d3d55093815e3786bff4a0622bd149322f94

  • SHA256

    8d2d6b4d7537a920b45ed9db1a34de74127b3c5a8a45f2c6f7a7bb04c06ad194

  • SHA512

    1274822bab233ba2f858dafb47e04838f969812e48ebb64b5f2135539653e0ed293b272b925fd5a28a8a3cea75a44cfcbe17f57d749ac6c0e43df8a3652530bd

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wKr0WQmV:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RL

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d2d6b4d7537a920b45ed9db1a34de74127b3c5a8a45f2c6f7a7bb04c06ad194
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections