General

  • Target

    9db5f7b965803bca9f64771274ca5428d0bb8fe85397ac7ecb730c8845fb8508

  • Size

    3.6MB

  • MD5

    46a191566b81cfb9df12a1c34283816a

  • SHA1

    17e019e4909f77d083503e84bd97d39316990f26

  • SHA256

    9db5f7b965803bca9f64771274ca5428d0bb8fe85397ac7ecb730c8845fb8508

  • SHA512

    4877a43923f2fc14d104e1addd86e14c3cee040ad14db3fe8d93b0e34305d5b44e55b27bf866bd44504c2f06c9e52fd14594399186beec786efb7f0b1b380f19

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWL:SbBeSFk/

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9db5f7b965803bca9f64771274ca5428d0bb8fe85397ac7ecb730c8845fb8508
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections