General
-
Target
7649a91f8064f1cdd4300cfed25acf4a3c38edd76b454ca68cdb4f67c6ed98e2
-
Size
1.8MB
-
MD5
5a75711389bb58329c06e22d8beeab43
-
SHA1
20502828bdcb059a4e7f8fffc84258bf5811ab89
-
SHA256
7649a91f8064f1cdd4300cfed25acf4a3c38edd76b454ca68cdb4f67c6ed98e2
-
SHA512
64589781424c749901316409c57f9c1f4019c36381dbcd1698fc0a32a5e40301cf35b12f997cf63a53a4b623285205dcc1a8789fb77885a620afda1cd34081cc
-
SSDEEP
49152:Lz071uv4BPMkHC0IlnASEx/z+cl8WNG/Wof:NABI
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
7649a91f8064f1cdd4300cfed25acf4a3c38edd76b454ca68cdb4f67c6ed98e2
Headers
Sections
-
out.upx
Headers
Sections