General

  • Target

    da45620a23b4ca9eeeca72b3cf415a0b4189e97a155b76b6cb6b2851247159ce

  • Size

    3.1MB

  • MD5

    2774feca45a2c03141f1d56dd377a394

  • SHA1

    426774ac17b48081538b86d4492dfb44c9db2590

  • SHA256

    da45620a23b4ca9eeeca72b3cf415a0b4189e97a155b76b6cb6b2851247159ce

  • SHA512

    43df55622c2f732c01dd2cfab9e18e1e4926355fdaf8dd2005e3680ef8a96d1e87e7c2403c8983b29578dc468fea4a610199ee801fbf733789c26092a25ce8da

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWh:SbBeSFkN

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da45620a23b4ca9eeeca72b3cf415a0b4189e97a155b76b6cb6b2851247159ce
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections