General

  • Target

    df7b8dbc321c4954fbe89aca1575666bfd5ebdb89abddcc764bad2ecbb1221ee

  • Size

    2.5MB

  • MD5

    0cb8d954c3a1cd01c4576b22109bf6fb

  • SHA1

    7193079ea74d40f73ec30b5b82b6913d24cad0c2

  • SHA256

    df7b8dbc321c4954fbe89aca1575666bfd5ebdb89abddcc764bad2ecbb1221ee

  • SHA512

    9155c74666fb2aad1c578a9218e7db019657e3f6d5af6b232c815ae82e2663d332d529765181917b1c8b7360d51ff954615a0519ad49cc73af3b4ccb64a74970

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkivwSbas4:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RG

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • df7b8dbc321c4954fbe89aca1575666bfd5ebdb89abddcc764bad2ecbb1221ee
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections