General
-
Target
ac0fe7a5662371c61b55e3b1658d90f129e27df03b431dad254694cd78a83fe6
-
Size
1.5MB
-
MD5
b378be2319f504c944e1848ed5181c06
-
SHA1
4abca4cdee57ba98618677ce07b90c3cc25c9f72
-
SHA256
ac0fe7a5662371c61b55e3b1658d90f129e27df03b431dad254694cd78a83fe6
-
SHA512
a9aad1dde9ca5b8a570fee3834857dfeffe1accab68c3e6eb617f99e83beef4c602fd22c0929697ef3483e09229e190d2e874f1b640eecb9904dd412e3a095a0
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYBLIgBCDDcljfmoyxW8GMm3P3e:Lz071uv4BPMkibTIA5tIgcHS/8GO
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ac0fe7a5662371c61b55e3b1658d90f129e27df03b431dad254694cd78a83fe6
Headers
Sections
-
out.upx
Headers
Sections