General

  • Target

    aef89292d45727c44dc19526e7570a64cc89ea3d86a79d2e54cab23d8b70e459

  • Size

    2.7MB

  • MD5

    3754c3153c44614445f0a36f412a8765

  • SHA1

    1a05b34992d8087050c2947cfdc9d79db6a9a7f2

  • SHA256

    aef89292d45727c44dc19526e7570a64cc89ea3d86a79d2e54cab23d8b70e459

  • SHA512

    17babbd10b947c0e77c510fcefb0f5996e74fc66a227f000420821fba8fffee59d6ae881185726be4af40f6ec8a9db93528ce6f9b7e7b7e976f94901afc0bdf5

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/R2R:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rr

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aef89292d45727c44dc19526e7570a64cc89ea3d86a79d2e54cab23d8b70e459
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections