General

  • Target

    44402f0bb57d7cd81f4d7978dc3b5bbb23f264fa3757c7adc76eb7524ca36501

  • Size

    3.0MB

  • MD5

    7a1441d740e808c9979d33ecd5ffcd6d

  • SHA1

    06acffb42855e797f45e7b644a9d02c62577856a

  • SHA256

    44402f0bb57d7cd81f4d7978dc3b5bbb23f264fa3757c7adc76eb7524ca36501

  • SHA512

    49f2c4b05f453a6962e69320635806613b88a9ffb1eb9cc342efc3b92422485d352e7cd4d18a9e5c122850b45ed2e3e0338cf3aae28df4fe04d67f336677cdc1

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5LDGTUXa9:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rc

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44402f0bb57d7cd81f4d7978dc3b5bbb23f264fa3757c7adc76eb7524ca36501
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections