xmrig | 0bc18a52a035b5960956086f85ec004d871d35789c57a6a96d8c180d923ba049

General

Target

0bc18a52a035b5960956086f85ec004d871d35789c57a6a96d8c180d923ba049
Size

2.7MB
MD5

6f78052f38f2e6e0e29d5990c22c8298
SHA1

93cd13707fac0932828167e18bc2db1c729c29cd
SHA256

0bc18a52a035b5960956086f85ec004d871d35789c57a6a96d8c180d923ba049
SHA512

b79c01726776911e59bbe39e5f46f007647d01a038f700caf47dc4ae489f7ed813f6bfe51c924198ae280ee38dd066fe7befe1b631d8773eae36cee03f826139
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5SKacyqUB:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RY

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc18a52a035b5960956086f85ec004d871d35789c57a6a96d8c180d923ba049