General
-
Target
0b79f413d6317d6767c5d4d1591cb9f8a0b24657aa6afdc50d5882156a4c5020
-
Size
2.1MB
-
MD5
8728e506db50ba4193b38938bea732ea
-
SHA1
0a1e9e1f9f4bd85a9b46108d4979666c6798db50
-
SHA256
0b79f413d6317d6767c5d4d1591cb9f8a0b24657aa6afdc50d5882156a4c5020
-
SHA512
1cde20b5ecc7079125be0b85ccbdc48c9ae47a0f40918d522ad59778c2c31eaf95f06d2187e6a4340040d8fa44e974e78bd611a78b4c267549964711ae981b4c
-
SSDEEP
49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pz3DYdpc:NAB7
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
0b79f413d6317d6767c5d4d1591cb9f8a0b24657aa6afdc50d5882156a4c5020
Headers
Sections
-
out.upx
Headers
Sections