General

  • Target

    a7b8d88f7a89dbb5321592e95aed251f16594ce1089dc3405bb6ec03bf1ea1f6

  • Size

    3.0MB

  • MD5

    5b6c593cc8c8b8065ec7e5b8f26a6723

  • SHA1

    fb60abd935a47af5c97b2f345132131f66685b5b

  • SHA256

    a7b8d88f7a89dbb5321592e95aed251f16594ce1089dc3405bb6ec03bf1ea1f6

  • SHA512

    00b575200a47ab4f140bcf736120f2ada61eabcc5ee53faa62bc1343ae4723b53a2da77db1f0386046a0b509ebd2aae01cabd8f42d0b6d8268b1d78eba8e85e0

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWo:7bBeSFkM

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7b8d88f7a89dbb5321592e95aed251f16594ce1089dc3405bb6ec03bf1ea1f6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections