General

  • Target

    e00cc48be96e30c28b39cd53cde62a5bb1cd7e32a8010f1f400edd46fb55f3ce

  • Size

    3.0MB

  • MD5

    96f348203f7b5d0b4995a6924f8f5b65

  • SHA1

    7d5f94556a7135b01e157bfe697234e2f04ae881

  • SHA256

    e00cc48be96e30c28b39cd53cde62a5bb1cd7e32a8010f1f400edd46fb55f3ce

  • SHA512

    8343febc0493af1c35f8c891b2207f0f012fa7094ea3ffaa1e601e44feadf9cccc53e9695a26eb5e265e8f3520fadad715d4e2ec88fca74568b64dc94c3fdebb

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrW7:7bBeSFk/

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e00cc48be96e30c28b39cd53cde62a5bb1cd7e32a8010f1f400edd46fb55f3ce
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections