xmrig | bbe3e39ab7a1412f78513b2d0767ad94a1cb03cca9fbef85918c99ed9e35bcc4

General

Target

bbe3e39ab7a1412f78513b2d0767ad94a1cb03cca9fbef85918c99ed9e35bcc4
Size

2.6MB
MD5

dbcd984adc4dd147ec85e25ae62040a2
SHA1

b4e3bb7076ac43b2ca74b974ce76cd7766314aed
SHA256

bbe3e39ab7a1412f78513b2d0767ad94a1cb03cca9fbef85918c99ed9e35bcc4
SHA512

a29964320058a62e037e6f8056f36327ac4a9cf87e9d1f745f9fd691ab3923b1e4e9f38956d635e1963fe1c269053673dc1a51eec5422ae16a8aa45b863dd45f
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfLvX:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R7

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbe3e39ab7a1412f78513b2d0767ad94a1cb03cca9fbef85918c99ed9e35bcc4