General
-
Target
d113177b3b150b2b3796f00cf3394071b87d6e3015e766a4b76f20e35251d9f4
-
Size
1.3MB
-
MD5
ba4a87706caa1bdbc4f9c748e5468f9e
-
SHA1
1993290032efc023d7eb028800ec4b202e8aa2f0
-
SHA256
d113177b3b150b2b3796f00cf3394071b87d6e3015e766a4b76f20e35251d9f4
-
SHA512
6aad3183cd1a36a313e07a7d2060b0c999546ca75065dfd60f4d4a4c6a9f52fb3afb84cdca82d65cf7c5d882e06afeb3996da2edb8b2e2b30cb7477179474651
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7SIslzdvkg11l:Lz071uv4BPMkyW10/w16BvZ+I8Rvt
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
d113177b3b150b2b3796f00cf3394071b87d6e3015e766a4b76f20e35251d9f4
Headers
Sections
-
out.upx
Headers
Sections