General

  • Target

    d6c22d172c0502eca13836c7c8bf34c7f6fe13cd2d883ce3ea12a1fcd392e5d3

  • Size

    3.3MB

  • MD5

    043ac75bfd06c4d77da8530476352b52

  • SHA1

    0509683ec7da10c9cb3efdd6ebcc8f37da706348

  • SHA256

    d6c22d172c0502eca13836c7c8bf34c7f6fe13cd2d883ce3ea12a1fcd392e5d3

  • SHA512

    226839a51c08f06fd27e75e7445d6e130a234e2915ac38bb2a152bcb88dcfde806d468a978957c953fac1bb04fea123590333e5b65089d2cf305e98dfc82d4fa

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWX:SbBeSFk7

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6c22d172c0502eca13836c7c8bf34c7f6fe13cd2d883ce3ea12a1fcd392e5d3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections