xmrig | 5ba3065f514b5d5f14f6c18d08cbfb8a5fe3f98761c4a4db7f6787e9ea04c966

General

Target

5ba3065f514b5d5f14f6c18d08cbfb8a5fe3f98761c4a4db7f6787e9ea04c966
Size

2.7MB
MD5

fb9bf47cc2c5704db0987ee7550d45fa
SHA1

210bbb8d0caada52ec01c52ef8e32cf93b35742b
SHA256

5ba3065f514b5d5f14f6c18d08cbfb8a5fe3f98761c4a4db7f6787e9ea04c966
SHA512

b71c7346f08f97f6eea82ff01092c6222d0dcc98af24d907d8a26a781ab56d20ec9eb9cf4dd05c413c5bb6a15fbf75e1016640f92538f243dbd6ee02e831c213
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6C:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rx

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ba3065f514b5d5f14f6c18d08cbfb8a5fe3f98761c4a4db7f6787e9ea04c966