General

  • Target

    192ec78418aa178cf30caa70937fef4ebb83071c92efc55d1fb33f076472d9f0

  • Size

    3.2MB

  • MD5

    2fcf88fceb025a9c1a686075bb1df4ff

  • SHA1

    3ac6532bd0151599d70e1276658d2db8ca58e829

  • SHA256

    192ec78418aa178cf30caa70937fef4ebb83071c92efc55d1fb33f076472d9f0

  • SHA512

    354dec406f9f4715e5c704b0b5ce45006e88cef70921c9fd9f09314ad6b7519300e9f9fd2595820a3b9751309a081725d039643f19284cb10863f5d90920cd7d

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWh:7bBeSFkF

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 192ec78418aa178cf30caa70937fef4ebb83071c92efc55d1fb33f076472d9f0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections