xmrig | 205f9d010c6615a3bc3de34b31990b48280c751c4bb0acd864aa03af7a204c23

General

Target

205f9d010c6615a3bc3de34b31990b48280c751c4bb0acd864aa03af7a204c23
Size

2.8MB
MD5

30aafce388284dfb3187ad2bc18c6986
SHA1

95f1c45c564e7e1da443092b8295544e501ee2e3
SHA256

205f9d010c6615a3bc3de34b31990b48280c751c4bb0acd864aa03af7a204c23
SHA512

2fc3e5aa4f1b7bff68fc4f8258e7e6e08d3c016083aa269bd164212afc88c232d1bb4f4362aabeed933379ce829f4bbe27c8667e902678fbdad713b4b055211f
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5LDGTUDgc:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RJ

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
205f9d010c6615a3bc3de34b31990b48280c751c4bb0acd864aa03af7a204c23