General

  • Target

    e30778e3fc704af3128c683c37c4db36ee47a1cc5144d9e2b8d3c0b8dcd790e4

  • Size

    3.0MB

  • MD5

    7a714a45a8e661986dd9f22e9512d5ec

  • SHA1

    0741c928cab59ecb3b0a47e7d31abbb84cacbfb6

  • SHA256

    e30778e3fc704af3128c683c37c4db36ee47a1cc5144d9e2b8d3c0b8dcd790e4

  • SHA512

    f183788ba33698b1ff1bb8beab287436353f5c0a52ca6df87d9b9e32c7385faa43d70ade52fa5c7fce4697f54717eb6f2b973a88bd6c04e2b74e13e3656fe544

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWj:SbBeSFkn

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e30778e3fc704af3128c683c37c4db36ee47a1cc5144d9e2b8d3c0b8dcd790e4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections