xmrig | dbdc9501c7b8fe0b16e03f0b9f25940f7c409c20fb9908711503cc4c4a75c20b

General

Target

dbdc9501c7b8fe0b16e03f0b9f25940f7c409c20fb9908711503cc4c4a75c20b
Size

3.1MB
MD5

64a681db5bb5cfe9afe82d804760f9bf
SHA1

9cce9eaf84b2f930cb9702a9134ab975acc1f712
SHA256

dbdc9501c7b8fe0b16e03f0b9f25940f7c409c20fb9908711503cc4c4a75c20b
SHA512

3fe5681009e7bd381b945eb720f1217c3b72cd72c8a4d2bb086e99f17d81694f1738d55ecd98edc6a73ac3213b8f77d340b7c8ac2eabc43143198af6519cc2bc
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWo:SbBeSFkc

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbdc9501c7b8fe0b16e03f0b9f25940f7c409c20fb9908711503cc4c4a75c20b