General

  • Target

    7dc23ff446b61cf0991fa10c0a3a52a81861f48219a0961a4db84f8ebd5a46c6

  • Size

    3.2MB

  • MD5

    5a34207a9b5653ab50d70ec515365157

  • SHA1

    761384e4b84aed51ed6928edd32e6c31c025a5ee

  • SHA256

    7dc23ff446b61cf0991fa10c0a3a52a81861f48219a0961a4db84f8ebd5a46c6

  • SHA512

    ff8e5fdb48e50829bb9fefcf0b5206224c029783000cc24632af07e2f0d675e310b977295e0134e5c2fd1ef3728ef03cc3ffe59db8db92c957e7f609461d0188

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWH:SbBeSFkL

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7dc23ff446b61cf0991fa10c0a3a52a81861f48219a0961a4db84f8ebd5a46c6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections