General
-
Target
5aeb65dbb63750abd3ebe5ce97a9e168b1ca0d179383d263ed4dae4dbf3d2478
-
Size
1.6MB
-
MD5
f5cefd4acaf0d1e64bb1f153e9d7c900
-
SHA1
7f4b77e4c57a92a46c946bcda7d7645f3f922094
-
SHA256
5aeb65dbb63750abd3ebe5ce97a9e168b1ca0d179383d263ed4dae4dbf3d2478
-
SHA512
a2210ca9aed2bf415f667963a1227b26b6086a2fdbef14f1e097bdaf66e98b2c204bdce59b32d156b927373e5843c9175e858b5b3fa8b8c7ddd350395b848ada
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdUK6S1uBkJdyFPNZmfsCJgiJ19:Lz071uv4BPMkHC0I6Gz3N1p3EZmEagy
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
5aeb65dbb63750abd3ebe5ce97a9e168b1ca0d179383d263ed4dae4dbf3d2478
Headers
Sections
-
out.upx
Headers
Sections