General

  • Target

    23eefc1831e57ae9a6431821596e104673df45522d95ee163a28092cbbb5d702

  • Size

    3.1MB

  • MD5

    960760cb8f821f4a6e2634897b5b8eb2

  • SHA1

    0863ecf962bbc588e14cf0cc38023cb38a3e9565

  • SHA256

    23eefc1831e57ae9a6431821596e104673df45522d95ee163a28092cbbb5d702

  • SHA512

    f9bbfce8d0a42716d22ba5092d04023960cbed0192fc4156a9b4266de8916ae761dd08787bc2d1723028a6730ac7a26073c30f8f0981fa053e7ff98916e64ffa

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWg:7bBeSFk0

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23eefc1831e57ae9a6431821596e104673df45522d95ee163a28092cbbb5d702
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections