General

  • Target

    3a2b5accf56b6e8b162035331580b560270453ac88592dcb7bdf5dde18d03e0d

  • Size

    3.1MB

  • MD5

    47d2a3b0023470d56a715c6bf03f5c8a

  • SHA1

    28c407715055de66558ae721ebc219ad7bd63107

  • SHA256

    3a2b5accf56b6e8b162035331580b560270453ac88592dcb7bdf5dde18d03e0d

  • SHA512

    d69dace1f965abc7308775041f069260a9ddbae60aad29d918b4d442a4ab47b74257a9b808d856217785df813e28daddb3f52de7da1aa5be7f5b816f4fac3720

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWO:7bBeSFka

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a2b5accf56b6e8b162035331580b560270453ac88592dcb7bdf5dde18d03e0d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections