General

  • Target

    7af34dc95400a135afe7a0890c534453913d0bc29c3faec5ad059ca0d72e222c

  • Size

    2.9MB

  • MD5

    d213e503a38df5360587e02879910410

  • SHA1

    8c0d2feda0bbe699282ca176690289cd0777f176

  • SHA256

    7af34dc95400a135afe7a0890c534453913d0bc29c3faec5ad059ca0d72e222c

  • SHA512

    a4002b3289918a894d7637f3084703e790e862ff7a41504c5482d85ba5b9304e08422846a9b0a9ad7de7221d81ade334603a0006e233dd0da808d1fbfd367035

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdgIZohteb5c4:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rg

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7af34dc95400a135afe7a0890c534453913d0bc29c3faec5ad059ca0d72e222c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections