General

  • Target

    9dfe511eb5f7cb26e8beaf7a9251146f4772c33e9d9cf4057be9217bf21c12c4

  • Size

    3.3MB

  • MD5

    e428769fd8fc819d1f6c2d3e94c6d4e5

  • SHA1

    447bf2c3e47c202190e71d286eb0b163fa37cda2

  • SHA256

    9dfe511eb5f7cb26e8beaf7a9251146f4772c33e9d9cf4057be9217bf21c12c4

  • SHA512

    a4b7284e9883a8494924a0f8806a7121abdffaae8e71b3656b853c8ac9ba43a8c511766b6839af92187656d97b316736efcc7dee5fc2680a5df5de2cda2cfdf6

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrW0:SbBeSFkI

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9dfe511eb5f7cb26e8beaf7a9251146f4772c33e9d9cf4057be9217bf21c12c4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections