General
-
Target
cf9ffda2ef0ce34208d9a01438505ee982c37a67e2c9b01c3f86f4c7508b3f69
-
Size
1.9MB
-
MD5
728ca5bf5e16f85a270768e24e4695fa
-
SHA1
1562dec4fdc972bd6fbc66d159e7133db7d493c2
-
SHA256
cf9ffda2ef0ce34208d9a01438505ee982c37a67e2c9b01c3f86f4c7508b3f69
-
SHA512
71f601c47839b151b9ce5594f15ea83ae8267dd62019922022b42ed3c18b5a19a4950ec80a7d3feebb33b7993d17d760cef93763e90928990e663f1f6359e8c8
-
SSDEEP
49152:Lz071uv4BPMkHC0IaSEzQR4ZcKcluKdocM:NABV
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
cf9ffda2ef0ce34208d9a01438505ee982c37a67e2c9b01c3f86f4c7508b3f69
Headers
Sections
-
out.upx
Headers
Sections