General
-
Target
dff5b60357139a48657ab3b80ad24ea8b529d32235fe939400f4f137bcbb32fc
-
Size
2.0MB
-
MD5
18d1ef9b84ab6ff51dfab44a4d16e5b7
-
SHA1
265d88663a13d19f3f45743738f08f560967e548
-
SHA256
dff5b60357139a48657ab3b80ad24ea8b529d32235fe939400f4f137bcbb32fc
-
SHA512
c86458129deafd268e89ef0b1ce7af35a167e9b8850bb0b50d1fba197a8e60e81f4403c711014fa6a262dc8c2938657798d51f8917368ae8be04d77940b4cd9d
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNIjTqaQV/cets/d93KjCu5IT:Lz071uv4BPMkFfdk2auTqao/c/3KNIek
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
dff5b60357139a48657ab3b80ad24ea8b529d32235fe939400f4f137bcbb32fc
Headers
Sections
-
out.upx
Headers
Sections