General

  • Target

    f631877c328391dc9b4ce2e5ad2d7e09a723856026d4d9faa7e891bcc8b0e5ad

  • Size

    3.1MB

  • MD5

    f864d636d8f7d468fa707065a843d3b6

  • SHA1

    11c84891da3ffd3bd8e8c0d02d9cb885a13c38df

  • SHA256

    f631877c328391dc9b4ce2e5ad2d7e09a723856026d4d9faa7e891bcc8b0e5ad

  • SHA512

    e4597f7ca66b893185b056beb23e5891bd7f19b49cae26b93fa5eeec3fc008d24a8ce5207634751f6d723b23b57ff43bd3a56fdc7e894c0e79a98063420f4f00

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrW6:SbBeSFkW

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f631877c328391dc9b4ce2e5ad2d7e09a723856026d4d9faa7e891bcc8b0e5ad
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections