General
-
Target
ad6cebd67df5a3d4ea583982d609cc7a1bc6c68a89aaba113e2a9704ecc1aff5
-
Size
870KB
-
MD5
10d1bc20600f2604bf68361512e7b5f6
-
SHA1
92f7267f5f688beb3a7245de5ef55a5db39485aa
-
SHA256
ad6cebd67df5a3d4ea583982d609cc7a1bc6c68a89aaba113e2a9704ecc1aff5
-
SHA512
2d600a4a24964bf145bcaebc28809f4fd0097f467f6405d5c4da0be4f56eb0cbac7fafbf3517b5b56ae27779608cce9df0bc0d7fa23581010630770a8b0126d4
-
SSDEEP
12288:UuqZ0GO3/fTn5rPtFDO5BTVo2hZiavoQFNc6E4PUwgsF+FCf9jGkxBi8KbYRz+KF:zv3/fTLF671TilQFG4P5PMCfZZdBz+2r
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ad6cebd67df5a3d4ea583982d609cc7a1bc6c68a89aaba113e2a9704ecc1aff5
Headers
Sections
-
out.upx
Headers
Sections