General

  • Target

    becc5a3ed6b8acfc2e3d29f958b630179ea18d170c82be1af1873d59c05e7f35

  • Size

    2.6MB

  • MD5

    ef7b82b9776f99b449b5879ed6115c8b

  • SHA1

    d15ad3337fd29106adf24cacfb289f6c8ad3e94c

  • SHA256

    becc5a3ed6b8acfc2e3d29f958b630179ea18d170c82be1af1873d59c05e7f35

  • SHA512

    ce3d343d28ce71b7bc328c4b5cec22740ba75e80a23842791ddde09ecc23dc941e54ad60e23ed175007691aea64234dde5a9cf8878a9ff40db9aa13e9224cc5e

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMk+QqGRjj3LJR/Lp:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RG

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • becc5a3ed6b8acfc2e3d29f958b630179ea18d170c82be1af1873d59c05e7f35
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections