General

  • Target

    6d85ce51189e30503dc9a8d92506d6c5700cd771b0129f8f4094ac819bf27111

  • Size

    3.1MB

  • MD5

    58be43144e00ddcba36d510eb36d2ad2

  • SHA1

    d75f9611b5a1376781e7fb85da59efd3499f7658

  • SHA256

    6d85ce51189e30503dc9a8d92506d6c5700cd771b0129f8f4094ac819bf27111

  • SHA512

    dc48a8833744152f3b5182056e57872c8a678c468ee4672714114ed18c5ecb030adf6847399a372808bf4304bc6f329df0b57fc563ce3f38273d80e908bde1f3

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWq:7bBeSFke

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d85ce51189e30503dc9a8d92506d6c5700cd771b0129f8f4094ac819bf27111
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections