General

  • Target

    fcf9176db49966bd87937294b5466e9b210c2a66eb088df27091e78c89f4ca7b

  • Size

    2.9MB

  • MD5

    17afb30a70376fdbd8ae35b3685fd33e

  • SHA1

    b2a56847bc5a2144358eedefd757746dd1db5184

  • SHA256

    fcf9176db49966bd87937294b5466e9b210c2a66eb088df27091e78c89f4ca7b

  • SHA512

    f5b18c90efd6d3b7f8638238221c9e40c3cde95a8499a2e269bfe7bb7ca58b35134b5ec3a193e6189ba14eef9cd619646d3962fcfc9aefb7e136cb3e1dcd1b31

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/mlR:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rp

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fcf9176db49966bd87937294b5466e9b210c2a66eb088df27091e78c89f4ca7b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections