General
-
Target
306a5855512b2878c69bf7ff67392dcf4942c995880e6592429a25ac72f6a567
-
Size
1.5MB
-
MD5
17392152be6a3a84d94241997d1c08e2
-
SHA1
759ab65f473c6a0e0f20e254c106d6c8a7f0c95f
-
SHA256
306a5855512b2878c69bf7ff67392dcf4942c995880e6592429a25ac72f6a567
-
SHA512
ac286b7ec32c51a37684c785d2a41b236f15b0b50d81c8592a2b6c3de6c630f151a16a833d1f51daf76bc5545822fa4396f0b09f357e047e3df1408a7d52397b
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbfCuZXejQN4r:Lz071uv4BPMkHC0IlnASEx/mCuZOjQq
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
306a5855512b2878c69bf7ff67392dcf4942c995880e6592429a25ac72f6a567
Headers
Sections
-
out.upx
Headers
Sections