General
-
Target
964d82eefc66d53800f4c4f7c48ce64a653501097114d69493f5fc6cbd8fad0e
-
Size
1.8MB
-
MD5
4a903e4957e60ce7dd85fc30bdbf2289
-
SHA1
14fffa46c0b57bd012ba9befff5810217cbbac6b
-
SHA256
964d82eefc66d53800f4c4f7c48ce64a653501097114d69493f5fc6cbd8fad0e
-
SHA512
b6236d68f3cc963211025e9479e5952ef699b2ba43f8a5e3c450077b26f40122cc1e3a169cccc7baee4163ff2d0b431be9b6a888eea2dcd3e27177cac373f041
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYtgWqabE1yuyzydx:Lz071uv4BPMkHC0IEFTo/abRuOWx
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
964d82eefc66d53800f4c4f7c48ce64a653501097114d69493f5fc6cbd8fad0e
Headers
Sections
-
out.upx
Headers
Sections