General
-
Target
ff21857cf5f409f5b641e369bad2bc7b1833d717e53645ac68fb38d1aff12343
-
Size
1.6MB
-
MD5
3786ab2501a699b2b7bb9a02a5acfcba
-
SHA1
95d5e162f3e0d0cde578457b491f73f43da32ac3
-
SHA256
ff21857cf5f409f5b641e369bad2bc7b1833d717e53645ac68fb38d1aff12343
-
SHA512
dcb4510e39468b97845fb4915bcc815578d14189be86e49811786c730736125516bba9344314f9c9efd67a00e41cc2bf459a68dfa6b02824e411cae61e165062
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbqoBQ0i1DFK8jWfa:Lz071uv4BPMkHC0IlnASEx/mi1DI8ka
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ff21857cf5f409f5b641e369bad2bc7b1833d717e53645ac68fb38d1aff12343
Headers
Sections
-
out.upx
Headers
Sections