General
-
Target
e1c6cff050dbbe1584f04b7c688ebf96084eefbf4f6caa8ade2a82fdbe1139bb
-
Size
1.8MB
-
MD5
548d747b2a7a148fb5c5c927e98557c4
-
SHA1
cebf3c98de2f63cdc2cebf5935440f098c6f563d
-
SHA256
e1c6cff050dbbe1584f04b7c688ebf96084eefbf4f6caa8ade2a82fdbe1139bb
-
SHA512
d98c1dbe841c7cdfef3202c755001a3f9f026aa2ab8ab9de4f58ca09a2f3f645e20d22e48b532c01f8f2302836fabc45c294a13a6e169288ed47b48b817833fd
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t46xKMp6DBvSsGQ8H+Pfjd7jF:Lz071uv4BPMkFfdk2af+vxGh+jd7h
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
e1c6cff050dbbe1584f04b7c688ebf96084eefbf4f6caa8ade2a82fdbe1139bb
Headers
Sections
-
out.upx
Headers
Sections