General
-
Target
edf414b8091b65be8066e8160f63cee41bff847e40746fa16817f1d2a7f045fc
-
Size
1.7MB
-
MD5
2d9709a43e223d1b81d9bb92428e897e
-
SHA1
ebf4a9c857a51837019ffcf1dd49dafd0e5b7f3b
-
SHA256
edf414b8091b65be8066e8160f63cee41bff847e40746fa16817f1d2a7f045fc
-
SHA512
3a08c6b2412af9356a5b394391ff54506b3685e4710480878c02b67e59db27a8045142f325f26ebc3c11b1785ca57efe61062464ed4dd82962d98781055281ca
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zk:Lz071uv4BPMkibTIA5lCx7kvRWa4pe9a
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
edf414b8091b65be8066e8160f63cee41bff847e40746fa16817f1d2a7f045fc
Headers
Sections
-
out.upx
Headers
Sections