General

  • Target

    bcb3c7a6faf943d8b5df23bb5d2cd9aa5968b56732e9612fc0f1d8ac613ac4cc

  • Size

    3.1MB

  • MD5

    16971cb47c4f7992c522e7f6e03f68a3

  • SHA1

    582e971fa264db5e63e6dda3bb999a44cb2cf97f

  • SHA256

    bcb3c7a6faf943d8b5df23bb5d2cd9aa5968b56732e9612fc0f1d8ac613ac4cc

  • SHA512

    0e89e6d1f56cfe34a98a32f785275996c55db8672a2bd6a785d96239cc379f49a94dcd271fd1dd4b4b209e8f46801773cb462992d5ea89e2b4a614c7dee6fdfd

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWE:7bBeSFkI

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bcb3c7a6faf943d8b5df23bb5d2cd9aa5968b56732e9612fc0f1d8ac613ac4cc
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections