General

  • Target

    170ad967b0122dd24fd56642aba1fd3b06131ed6bc8f247fff731d671028abc2

  • Size

    2.9MB

  • MD5

    571c01e6f1a136fa055c69c8e00ae4df

  • SHA1

    de369f67629949b5a802eefa5e470c0b8a93b4f7

  • SHA256

    170ad967b0122dd24fd56642aba1fd3b06131ed6bc8f247fff731d671028abc2

  • SHA512

    b7e062040e83451bd959a28d17dbea833bacb55f43a3873c1adece392689f5aad704dee06a6921d1d08ca8877b68e061755afa98787eecd0e4db31f0546e0f62

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfZFZzMHF:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rq

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 170ad967b0122dd24fd56642aba1fd3b06131ed6bc8f247fff731d671028abc2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections