General
-
Target
0db020eea96a3c26e9d5a67ae246c24a190ff4a0719924385eab4812162c20f5
-
Size
2.7MB
-
MD5
3f5ba8a6d1f13823ce9f4a8965e1e472
-
SHA1
20a998fcc0e5914b62909057a1f5dbd3b42da935
-
SHA256
0db020eea96a3c26e9d5a67ae246c24a190ff4a0719924385eab4812162c20f5
-
SHA512
cb2166809bc6a306c499e982d150ef73f68ec3b4a4255746d00dacafc3935cb9300ae5b63bf37881e84654da4df5f7cbad15d0620ae95db0f98a99fd3a7fe7e7
-
SSDEEP
49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/R2p:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RH
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0db020eea96a3c26e9d5a67ae246c24a190ff4a0719924385eab4812162c20f5
Headers
Sections