General
-
Target
a66f64bd8e7d8ed0e2a421a3eaa1c264fb12fdad8e2857a45776ded9d40a0216
-
Size
1.8MB
-
MD5
7fd1754388b653dd6a71c4e158b2dfa8
-
SHA1
3ec23c83b6569b302a7f5b3ee07202b8712a2cf6
-
SHA256
a66f64bd8e7d8ed0e2a421a3eaa1c264fb12fdad8e2857a45776ded9d40a0216
-
SHA512
80f3b7dd90cba51c3518e7391b089e1a43982072cc58c0008b2172420aaf3ee772310ea644cf4abdff773971e9e3e85846bca8fea2aa1050a59d7e2e2c12caaf
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYtgW+hVkVoC2NCNG:Lz071uv4BPMkHC0IEFToFkK
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
a66f64bd8e7d8ed0e2a421a3eaa1c264fb12fdad8e2857a45776ded9d40a0216
Headers
Sections
-
out.upx
Headers
Sections