General
-
Target
6a257272d5e56328d9373eef30dc2e1cf696a090971d32ed109f487c6e1fe6b9
-
Size
1.8MB
-
MD5
006b2fc52a82a38c1e5ed0a14c145fe2
-
SHA1
3c6c8440e32dc6f4136e31272a53a9464710c5ff
-
SHA256
6a257272d5e56328d9373eef30dc2e1cf696a090971d32ed109f487c6e1fe6b9
-
SHA512
9bf41f4eb1d81524fedba95c1ce431e595d879a5e44942e522b172441f51ea3858d33b91934bcbc3f1f5df745927b6c75b6d31304bda4b0df89d6e766b85b4dc
-
SSDEEP
49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHqtc:NAB9
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
6a257272d5e56328d9373eef30dc2e1cf696a090971d32ed109f487c6e1fe6b9
Headers
Sections
-
out.upx
Headers
Sections