General

  • Target

    db91b1e96523513cec07c9c9db3f315e947fa9178faf37901ed02f827ddd556c

  • Size

    3.9MB

  • MD5

    f2c15503297558777d2a9491bc357331

  • SHA1

    6e3e1f7190249846fc87444bd02d6163bd6141db

  • SHA256

    db91b1e96523513cec07c9c9db3f315e947fa9178faf37901ed02f827ddd556c

  • SHA512

    c400b3446ebb8ed627469e73b2f4919ddcbbf872d35ac1e92473fda43aa67bb1ac3c4fb86007737c35b1e6ac442d02a9bc02d0dc669ef9d183cbd36b1de20c72

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWu:SbBeSFkK

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db91b1e96523513cec07c9c9db3f315e947fa9178faf37901ed02f827ddd556c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections