General

  • Target

    1cdb1dd760bc9fb89a21278e8c228e3e79c8a5fe10e63233d0eb34e525052cbf

  • Size

    3.1MB

  • MD5

    bda10fc839c904f8795f5334055eb81c

  • SHA1

    cd9aaec29e99e948fe3acccf941477d2699650ed

  • SHA256

    1cdb1dd760bc9fb89a21278e8c228e3e79c8a5fe10e63233d0eb34e525052cbf

  • SHA512

    ae608b3591190fb226e274594dd46b54a30c86eda3654185006cedc7b5597ed7b080b8f579410b70da5102cc9f2ba081bb27f1b8f588450bfeb62dcce6388019

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWu:SbBeSFki

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1cdb1dd760bc9fb89a21278e8c228e3e79c8a5fe10e63233d0eb34e525052cbf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections