General

  • Target

    ffa6b00242d1e52b32a3f4cea6ab331bfb980b02ab41f5f7730eadbe0bd82609

  • Size

    3.1MB

  • MD5

    8dc389f2fc480c5deed7eb50f4ebb68c

  • SHA1

    4300d4bd65254238467ee5b88bce1b1154d242fe

  • SHA256

    ffa6b00242d1e52b32a3f4cea6ab331bfb980b02ab41f5f7730eadbe0bd82609

  • SHA512

    fac0de22952cdfc77fd5f6f77f871f71cb57aabab8931e7ab7879ca0b4539fbc862a9e2ca44fff5c4b8cf80a02b4f3fbf4806281c7eb9c920caa5e0a33db40b5

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWq:SbBeSFk2

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ffa6b00242d1e52b32a3f4cea6ab331bfb980b02ab41f5f7730eadbe0bd82609
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections