General

  • Target

    2e94c130a13647d12a6a821ea34426bfedc9e0f08152c895e109bc610c50aa04

  • Size

    3.0MB

  • MD5

    d20624c06a378fc576bfb0f4fa3baa58

  • SHA1

    2abd5d746939066247f2d1aba7e3527652f97106

  • SHA256

    2e94c130a13647d12a6a821ea34426bfedc9e0f08152c895e109bc610c50aa04

  • SHA512

    e050caed759e89aa91e7a52c9092eb9b3aafd29d8a5093c93cce506c9e3cd826a4e99e780265fa0a0d7894ac64c2b07c3edaadf208bb29eb30e5477d32c513ce

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWp:SbBeSFkF

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e94c130a13647d12a6a821ea34426bfedc9e0f08152c895e109bc610c50aa04
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections