General

  • Target

    293d0ab228cb8095cd6384513552403ffbbf24115dca23ec731b579d812b3dba

  • Size

    4.3MB

  • MD5

    1a8ad0e310fdfef2b79b4a79439791c3

  • SHA1

    f6910a1a55aad60effac38c4cb43df9ddedde719

  • SHA256

    293d0ab228cb8095cd6384513552403ffbbf24115dca23ec731b579d812b3dba

  • SHA512

    42341fcf83c061b786e73f7254828691067d54bcee1cee893499faa732cf54192af85c24c88ad0241801afed1a1cba15572aafa857276e5a4010eedb4553799f

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWv:7bBeSFkj

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 293d0ab228cb8095cd6384513552403ffbbf24115dca23ec731b579d812b3dba
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections