xmrig | 9a5f22dbb7b69a76a2fcffcc8fd66c2deb65c91a44125271c1f5a400d7ed3221

General

Target

9a5f22dbb7b69a76a2fcffcc8fd66c2deb65c91a44125271c1f5a400d7ed3221
Size

2.5MB
MD5

016dbedfd30f24ccdac8f6389a6a6cc5
SHA1

1e8d1a4a024dbbb85ce446b17d0ce0203b7d42fc
SHA256

9a5f22dbb7b69a76a2fcffcc8fd66c2deb65c91a44125271c1f5a400d7ed3221
SHA512

af66a7b2591aacd60dc39d07f7a2c5b4269ff30582e02a680c7ec3aa4d580ce76dc4178afb86cc96d9e3b562c1ff054c2244f606322db8d21365381b70a7dee1
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16B8lCn+:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rg

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a5f22dbb7b69a76a2fcffcc8fd66c2deb65c91a44125271c1f5a400d7ed3221