General

  • Target

    f9282c5158e6c2b0ecb4bb641bd7c868dc358ec1c4bab71b690ceaaf625dfcfd

  • Size

    3.2MB

  • MD5

    167aae2af622eb8f86ca80d5c7b27ac8

  • SHA1

    3e27c675c3e890af76aed31ff921a164c341fa19

  • SHA256

    f9282c5158e6c2b0ecb4bb641bd7c868dc358ec1c4bab71b690ceaaf625dfcfd

  • SHA512

    fcf1940bc1d99ecf302e28f04e686475709bc04ef07859d33c1fb8bf3b0c13c554dcabfce06a40588cf2f4dccee4807477f1399d31c33c6dd1e1c41a4567b49d

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWL:7bBeSFk3

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f9282c5158e6c2b0ecb4bb641bd7c868dc358ec1c4bab71b690ceaaf625dfcfd
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections