General
-
Target
480306c7eb43ceef9bdcb321cb0ef8d8d2cbfd0f3f458eb67d60f44f1174e6fe
-
Size
1.4MB
-
MD5
fc18acfd2c5a8e8da6273f69cb569a48
-
SHA1
c6d308db8d3da7075e7e2f4cd6a7783074a1f3fc
-
SHA256
480306c7eb43ceef9bdcb321cb0ef8d8d2cbfd0f3f458eb67d60f44f1174e6fe
-
SHA512
219098ca16b42aaa70b28f8483703b926eda9b1400c32d3b9bb60d302205fa3c2cc53486e142d1c0236954397c0aaf984d8337be5a4c01a5937e57e5229d626b
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/Vx6KVF:Lz071uv4BPMkibTIA5CJ7
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
480306c7eb43ceef9bdcb321cb0ef8d8d2cbfd0f3f458eb67d60f44f1174e6fe
Headers
Sections
-
out.upx
Headers
Sections