General
-
Target
ca796805816098eed26219f14c7e712d5034d10dda5c8e43d34b0adb17bc6762
-
Size
1.5MB
-
MD5
5b2cea93fd64c7326103823f39c2fc26
-
SHA1
28f7631de375131b98dddc99daacd224311840b7
-
SHA256
ca796805816098eed26219f14c7e712d5034d10dda5c8e43d34b0adb17bc6762
-
SHA512
2fcbbfd5086d326ee9cc7b9c42166cb085458026d0bccedb08ac303c968c630b3b3cf35b198980ec3c178fac715e81e3e8b6221f4f33f13a49823641708ee1f2
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgsU5qTqOkDil2UZu:Lz071uv4BPMkFfdg6NsXu
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ca796805816098eed26219f14c7e712d5034d10dda5c8e43d34b0adb17bc6762
Headers
Sections
-
out.upx
Headers
Sections