xmrig | 61d871bbd5325a53d9e6816ce62b16084bc458c522d2a56f59d3ea2a592139d5

General

Target

61d871bbd5325a53d9e6816ce62b16084bc458c522d2a56f59d3ea2a592139d5
Size

2.6MB
MD5

5023ee041aa848a3859efa8851d21cc7
SHA1

6fa1163ccbd8c0306fbbe0dd4b552a7e0ba8d2ea
SHA256

61d871bbd5325a53d9e6816ce62b16084bc458c522d2a56f59d3ea2a592139d5
SHA512

bf0911e984be70bbb764f3765f7840b29171c8aad7a3bab89a70f3e318283d1ce56495d329533be4adb70fbf9c8f3e68489aedefecb14b30351d2ada56eb58c7
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfLDCyT:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rv

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61d871bbd5325a53d9e6816ce62b16084bc458c522d2a56f59d3ea2a592139d5