General
-
Target
ed4bb173cd9eb2b5d18c5c0e2d74c3818ce9903b517b4eb319805d9c304ef19e
-
Size
1.9MB
-
MD5
0cf3050215225e913cc03a6b0b97973c
-
SHA1
8152ea83d42d08847586c7b8c4af11e74b207979
-
SHA256
ed4bb173cd9eb2b5d18c5c0e2d74c3818ce9903b517b4eb319805d9c304ef19e
-
SHA512
1ef325c0ded6eb87582b08f1263331a152455ec75adaf26899419f22a13743935b10f2c5ef2a990768cbebb5fdb318ccc747f1ca1a7d653a228354910ce90f20
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zl:Lz071uv4BPMkibTIA5lCx7kvRWa4pm6E
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ed4bb173cd9eb2b5d18c5c0e2d74c3818ce9903b517b4eb319805d9c304ef19e
Headers
Sections
-
out.upx
Headers
Sections