General
-
Target
d3a2b2ee08c5062e1bac8f7bfee328f6acb1d136c60572a1b6982076aa80586a
-
Size
1.7MB
-
MD5
108590f348a320759e6ccf43d1204d15
-
SHA1
38bea73e0338157941cdbf78e1e8c2396601c3ec
-
SHA256
d3a2b2ee08c5062e1bac8f7bfee328f6acb1d136c60572a1b6982076aa80586a
-
SHA512
f2c39ef35c0a7a2ecf85304af6ae85326b1d404b0b6f49bd25444e7f06e2d9f13314384fa419c0c8e8efb96386e18c44f4c26b98bb74586976306fdc9b06173f
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCUATSU4HE1lt4Hc:Lz071uv4BPMkFfdg6NsIRh4HE55
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
d3a2b2ee08c5062e1bac8f7bfee328f6acb1d136c60572a1b6982076aa80586a
Headers
Sections
-
out.upx
Headers
Sections