General

  • Target

    3004ec567271804dc0a41c91e05f419d38ae0227b00c22dd7098a09ea10ba360

  • Size

    3.0MB

  • MD5

    b55fc03bd7cfbd371e803cc32fb41dea

  • SHA1

    a4bac90aff50367ad3b893b0d075dad72e005a1a

  • SHA256

    3004ec567271804dc0a41c91e05f419d38ae0227b00c22dd7098a09ea10ba360

  • SHA512

    81d95e238adcc6c5da844f68888e9fd9b4ae7b5f1fc3f3b1bf0e0a157ba1ab39f3a75438562fc6f7eb23a19e2c572f0750e5004224a52ef7a9cd106dfcdb8532

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w1+x5iVaV:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R7

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3004ec567271804dc0a41c91e05f419d38ae0227b00c22dd7098a09ea10ba360
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections