General
-
Target
036a849732eb906b0b981f2c7f301be1f06e6268d8c79d8ed66a8d45d6f7cc28
-
Size
1.3MB
-
MD5
05d8dc04e2206adbbc197206518d2012
-
SHA1
b5a3b7a66f3eb0ca5f037fd3cc3b10c7cbc0ad0d
-
SHA256
036a849732eb906b0b981f2c7f301be1f06e6268d8c79d8ed66a8d45d6f7cc28
-
SHA512
f9a6e07ef6268b28669debbc85425d8c9c1978de563402850993bbd55b1a028b2385abcc62a1be1aed426a9ee8437f101111659f337b041547fbc064877e6aac
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYfGS:Lz071uv4BPMkHC0IEFToBS
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
036a849732eb906b0b981f2c7f301be1f06e6268d8c79d8ed66a8d45d6f7cc28
Headers
Sections
-
out.upx
Headers
Sections