General
-
Target
bff6be5cc749fed0b294a66c2db16ef3dea5637411e3a04ad961590a74ff1a5d
-
Size
1.6MB
-
MD5
65301a3dc605fb240de3db20b11de411
-
SHA1
1303727be9488af89253198b719b405104389889
-
SHA256
bff6be5cc749fed0b294a66c2db16ef3dea5637411e3a04ad961590a74ff1a5d
-
SHA512
6580caf979a5b4fc19e1c0378af18cadc04db94b5ec7fa3d37f69cd267642568bcbcf7d7a6b12b37b1635992d9aba34da81e81b879206c3aaa8ab60d8bb3e63b
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYL+t6kw2bPUyYaKXgXScSFA9JtG:Lz071uv4BPMkibTIA5LDGTUXaDmd
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
bff6be5cc749fed0b294a66c2db16ef3dea5637411e3a04ad961590a74ff1a5d
Headers
Sections
-
out.upx
Headers
Sections