General
-
Target
c431ad6dff5f895fbecb87cdd3a17011dd83262f522bf6891c7768a2121832b7
-
Size
1.8MB
-
MD5
4f7bbc88c724150f6da5a54ffd48ff2b
-
SHA1
36b1146804715151ae6935ee1a55b91e4a95fa33
-
SHA256
c431ad6dff5f895fbecb87cdd3a17011dd83262f522bf6891c7768a2121832b7
-
SHA512
6701fcb1b72206de76f50e72f656e1b76488ca1de03b96ff7aeded059ac9e158d497a3ec880ed142a7c09d3c9ed82dfe03f0b3b6afc0b83b76cd011c231f6dee
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNIjTnHzlyZAcbRjsvAqdP3:Lz071uv4BPMkFfdk2auTdYs/
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
c431ad6dff5f895fbecb87cdd3a17011dd83262f522bf6891c7768a2121832b7
Headers
Sections
-
out.upx
Headers
Sections