General

  • Target

    1626736346daf454425b345a579104ef4d2b4d66c496dea49a2c35fbbf1b8f39

  • Size

    2.8MB

  • MD5

    a1f8a1a2651e2530e1c43bca867a0cd7

  • SHA1

    51607b5f21e166b171560d69819a32a07613d7ca

  • SHA256

    1626736346daf454425b345a579104ef4d2b4d66c496dea49a2c35fbbf1b8f39

  • SHA512

    38180fb5a81af1a16c0cf92a0dd0d8721dd755bd1e420d56959f683e2b6d5110e03bb780bf494211d07dbc1bddad67bc4b336c1dcb4442ff1e4147786ac209b8

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8Cnki2WGcR:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RT

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1626736346daf454425b345a579104ef4d2b4d66c496dea49a2c35fbbf1b8f39
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections