General

  • Target

    eb58eb69cdea02f95473c28f00a89afaee617d8dac5c12b79207b7060854f886

  • Size

    3.0MB

  • MD5

    407fa98c52fb17e8de7bf52d74a5a005

  • SHA1

    51bf475da39a84932a129d2e7a5e5463821ac263

  • SHA256

    eb58eb69cdea02f95473c28f00a89afaee617d8dac5c12b79207b7060854f886

  • SHA512

    8dbbc2d2b3f537e69998ee2c1d95f770b05b112e1cc7c2177d75b1197634af47e161270070223f44180d3b9f9e43a8e223ab14e04f5652fc317b23df24173a0b

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWC:7bBeSFku

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb58eb69cdea02f95473c28f00a89afaee617d8dac5c12b79207b7060854f886
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections