General

  • Target

    949696ef575da0e697abe7afaee177bff3403778c6fc44868e37b05188ce7146

  • Size

    2.8MB

  • MD5

    859df2a70495a5a419b552a9c787d5d8

  • SHA1

    205f256e46e1db817673bebbbf7817816dfbca18

  • SHA256

    949696ef575da0e697abe7afaee177bff3403778c6fc44868e37b05188ce7146

  • SHA512

    f5cfd9c1993aa230511ab144cac1c59fcaefc68cc595395d9b0c6cc049090c9756ec7ec454f1f33a8119da3dd115b7b2f34e76a73d080a80bf19da6f99525fb5

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfZFOz4WI:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rp

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 949696ef575da0e697abe7afaee177bff3403778c6fc44868e37b05188ce7146
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections