General

  • Target

    f1f543778350390034e54e7af86cba10002827bb079f32a8d6c18cd599cf9e0c

  • Size

    3.0MB

  • MD5

    04029131422e16fd5504724ebf1da03f

  • SHA1

    a1611f657e4d87ce1f44f442fcb1695772278ed7

  • SHA256

    f1f543778350390034e54e7af86cba10002827bb079f32a8d6c18cd599cf9e0c

  • SHA512

    7f9b775a316a3680f904c0461e1339cc5919147fcb79fe936776df7143bdb9a5d6fabfa516bf3622d10d580425700345d319ba8630545a1727edadd64a64b0e3

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWG:7bBeSFk6

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f1f543778350390034e54e7af86cba10002827bb079f32a8d6c18cd599cf9e0c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections