General
-
Target
3a3efb9e93e170f338bf3c2fbce7ee360eaeeb80e1cbff40175e7c1f5dc67caf
-
Size
1.5MB
-
MD5
5bef627460b7fa12bf8fd86c7fd07e8e
-
SHA1
08d91b0519811f3c7c25c9e14bd75940bc28514a
-
SHA256
3a3efb9e93e170f338bf3c2fbce7ee360eaeeb80e1cbff40175e7c1f5dc67caf
-
SHA512
29d166c787b0bf50147a2a2a57ba2b1af45ba19806ee39ed45ea394aea694d92b938cae4f9acb3fdad8fd63368234564eb4c5c0dd044643c250c89ec8832e9d7
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYBLIgBCDDcljfmoyxW8GMm3P3G:Lz071uv4BPMkibTIA5tIgcHS/8GW
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
3a3efb9e93e170f338bf3c2fbce7ee360eaeeb80e1cbff40175e7c1f5dc67caf
Headers
Sections
-
out.upx
Headers
Sections