xmrig | dd3c41dd275dbd6e462e4df2611c2b60bef74e0f5063f1b09e5ef432b45c684d

General

Target

dd3c41dd275dbd6e462e4df2611c2b60bef74e0f5063f1b09e5ef432b45c684d
Size

2.5MB
MD5

93358624228ec989ca3ef294895d0c7c
SHA1

3df1b10c9a75188a1a30ce3aa58c590384d0fca5
SHA256

dd3c41dd275dbd6e462e4df2611c2b60bef74e0f5063f1b09e5ef432b45c684d
SHA512

955ba7cef3eb9145a3abfc02fb05b93524e99f5cabe2b1a821fd240f9abd3de9c0d2b5bfcb7bae61a77391d55dee89a7b44812fd54726bb06a843132368239d1
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyWvW/Xff:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R5

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd3c41dd275dbd6e462e4df2611c2b60bef74e0f5063f1b09e5ef432b45c684d