General
-
Target
38e6bdd76ab8026ff8857e080c823973b1037ecaf4cf618dc8b2466d8fa50003
-
Size
1.8MB
-
MD5
416c02fd5a30a310535fd42c8e824639
-
SHA1
25f79cb2f345fdd56e5b873f724d8cca2b406e82
-
SHA256
38e6bdd76ab8026ff8857e080c823973b1037ecaf4cf618dc8b2466d8fa50003
-
SHA512
34279eef6217af10248641920655e528e712517766ef6b03308e575d2d3f8e6e2345a4dc1038686099990bbc1d6690bf12e1b9aa758344c0ffd120389bcbf2fd
-
SSDEEP
49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXY21UMm:NABG
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
38e6bdd76ab8026ff8857e080c823973b1037ecaf4cf618dc8b2466d8fa50003
Headers
Sections
-
out.upx
Headers
Sections