General
-
Target
cb6cab1499e4803cab5860bba55fb31d9db945132891346383590b8cdbc03964
-
Size
1.8MB
-
MD5
a5ee66c0bacd2dd4d3230792b63d036c
-
SHA1
31499c6c2b14a5a79992da26f200136a5d7fb95d
-
SHA256
cb6cab1499e4803cab5860bba55fb31d9db945132891346383590b8cdbc03964
-
SHA512
a3db1e0587560a8915dae9731f40dd3dab16649130522f6065b7d3e28cd26189aa69e3d2fac06bea3d312be2dcb9ffcfcf2501ebfb052e8f89f80733a0a8dbaf
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SZaK:NABy
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
cb6cab1499e4803cab5860bba55fb31d9db945132891346383590b8cdbc03964
Headers
Sections
-
out.upx
Headers
Sections