General
-
Target
7d0df20b5fda3fa20de4121e8f00295b4494fddbfc3e4c05bfe0066efe166b1c
-
Size
1.8MB
-
MD5
c5212958ce20689d5c5e070225156526
-
SHA1
6ca4e1a7a1e28622fd34bc129b4dba0e1a0c9096
-
SHA256
7d0df20b5fda3fa20de4121e8f00295b4494fddbfc3e4c05bfe0066efe166b1c
-
SHA512
8d2ac98ebc02a931bf967d786faa74377b5880f5bd0cfade7b9004eb176f95a4a83827433c442685afcd8e89e9e6ae4d9dbb9bc75936cd26a8b5b9c2a187a1f6
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCUATSU4HE1ltbDuekX:Lz071uv4BPMkFfdg6NsIRh4HE5eeu
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
7d0df20b5fda3fa20de4121e8f00295b4494fddbfc3e4c05bfe0066efe166b1c
Headers
Sections
-
out.upx
Headers
Sections