General
-
Target
d1194c68b6d2fbec721b11fefc1b5a22743ea7b698ee3b775005c25f4ed07072
-
Size
1.8MB
-
MD5
487367f66bf4cc2aab04c60bf3da5a1e
-
SHA1
2dfc40cddb2749896ab0f1bc69cc459afd2e33b1
-
SHA256
d1194c68b6d2fbec721b11fefc1b5a22743ea7b698ee3b775005c25f4ed07072
-
SHA512
04fc1f111a169de4f74611fe81b35b1e3fcb5f2fe90d2667cb1c9fcfc2ec5b3b455ac76ff60f0f15b849e6b8cc1f6500bef1c423a806a2806530c28baeabf3bb
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupQF4g6FReQwUzN6Rf0Zra+Jsl3F9:Lz071uv4BPMki8CnfZFOzZuL7
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
d1194c68b6d2fbec721b11fefc1b5a22743ea7b698ee3b775005c25f4ed07072
Headers
Sections
-
out.upx
Headers
Sections