General
-
Target
b1d784ca4bd2f02a591b47c1d81a2791d8409f34c8ae4f8199d252d8fe968db1
-
Size
2.7MB
-
MD5
f98dd216792a88cba773b8f912e08b4f
-
SHA1
b2c385205652e721ceb23532b8cc9f11ac8a1068
-
SHA256
b1d784ca4bd2f02a591b47c1d81a2791d8409f34c8ae4f8199d252d8fe968db1
-
SHA512
3e17aa2c01133e27b1ba9a91baadc01d3dc7276e94594d7862d663368ee67b8ff18b945910e2140187e09ffee47e28a6c3f567bb9a1e6bdc0907d1fdf938364b
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5CA:NABx
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
b1d784ca4bd2f02a591b47c1d81a2791d8409f34c8ae4f8199d252d8fe968db1
Headers
Sections
-
out.upx
Headers
Sections