General
-
Target
f2ca2741d65f18fbe6f42c04a1f3a03f987a3d3b48f29fd65e44b056925497fc
-
Size
1.6MB
-
MD5
b75e50dd5066519444c55c700b546f30
-
SHA1
301c1e2a8422b42cb747d9211a30e83ab27d8b5e
-
SHA256
f2ca2741d65f18fbe6f42c04a1f3a03f987a3d3b48f29fd65e44b056925497fc
-
SHA512
996ed35a2086ab90d1eb3550ccf2105d62af3038e030bbc6c263cf5800211a22ce7fb4be68174bbb5f9be79febd8a9834eda24e877fa34df4da5f46e9ba58857
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdUK6S1uBkJdyFPNZmfsCJgiJ15:Lz071uv4BPMkHC0I6Gz3N1p3EZmEagy
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
f2ca2741d65f18fbe6f42c04a1f3a03f987a3d3b48f29fd65e44b056925497fc
Headers
Sections
-
out.upx
Headers
Sections