General
-
Target
d2bdaa1a1c6fd6454c81e750cba89a5d2a13e26e0ff554e822fbc08b08d51d41
-
Size
1.6MB
-
MD5
f3db0802edb7e723129a6487bd28f448
-
SHA1
11e28a6cf10c8c3f7ace7b5a4e5f2804e87e8175
-
SHA256
d2bdaa1a1c6fd6454c81e750cba89a5d2a13e26e0ff554e822fbc08b08d51d41
-
SHA512
d2c208813b04050e693aaa11c75f5b5ad52dfaf88be429636f5b4a968ab298c0de71065552d4f19055ca6cef6a5cd7bab2404a3d968a28a17fabc80177ec0cc5
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNI/TQ7CWsJNooVbvx:Lz071uv4BPMkFfdk2a2nooVV
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
d2bdaa1a1c6fd6454c81e750cba89a5d2a13e26e0ff554e822fbc08b08d51d41
Headers
Sections
-
out.upx
Headers
Sections