General

  • Target

    ab41b3bfbca282b06c3006b7e93cc1f087027abca663d0ee02da56952fd81610

  • Size

    3.1MB

  • MD5

    67b656e6541f69d4515df4c646ee891a

  • SHA1

    544f1852db9ebb19270bba3768ca7e1f714f200a

  • SHA256

    ab41b3bfbca282b06c3006b7e93cc1f087027abca663d0ee02da56952fd81610

  • SHA512

    95328aec97c7f1e59a2a54f893cf03c0212fe84539197f2e4f2c784471b94b84cab92431bcbd4a5d28a8eb9e295424c0b4a45bbb9cd27cf548ba7344799fc873

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWV:7bBeSFkB

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab41b3bfbca282b06c3006b7e93cc1f087027abca663d0ee02da56952fd81610
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections