General

  • Target

    5652233d3c4b6a3a93ade1456c1ec103eda95f281232e2c353dcf0e51ed8a87e

  • Size

    2.5MB

  • MD5

    c0923f126ebdd58fed1da32c82af9225

  • SHA1

    e16520ab33300f2d2ba203808b22458c7ad612f4

  • SHA256

    5652233d3c4b6a3a93ade1456c1ec103eda95f281232e2c353dcf0e51ed8a87e

  • SHA512

    32228fa5b8ffa9eeacaeee8cfd871030457ef412b6494bc0c6777b988040b9648a3d683676f3c8e30979dac1791e7ea62b1b6f6f324f811748061168c2b04563

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdk2aSy:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RN

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5652233d3c4b6a3a93ade1456c1ec103eda95f281232e2c353dcf0e51ed8a87e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections