General
-
Target
4996a1dc9612efcab49fd0a9f468228afa9cc11103a3f16335efd0b24cb37cf9
-
Size
1.8MB
-
MD5
082cb1e2cb230dbc34aaa04d83e33609
-
SHA1
4cbbe475120bd64a11ef8dda337b26958bb5bf37
-
SHA256
4996a1dc9612efcab49fd0a9f468228afa9cc11103a3f16335efd0b24cb37cf9
-
SHA512
180e3993834f6e4251c8fc757a216a47b830704a0485e3fac8b50ef9404f976fa9248489254eb8703797384ba5ae054937fac60dfb8e94f52febbf091970f0f6
-
SSDEEP
49152:Lz071uv4BPMkyW10/w16BvZX71Fq86zpM:NAB+
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
4996a1dc9612efcab49fd0a9f468228afa9cc11103a3f16335efd0b24cb37cf9
Headers
Sections
-
out.upx
Headers
Sections