xmrig | 6e5905fe71f2a311e172aa8a8e07c8dc482c72047ade81b349961a1e24110d2c

General

Target

6e5905fe71f2a311e172aa8a8e07c8dc482c72047ade81b349961a1e24110d2c
Size

2.8MB
MD5

9115c45386d094920f9f36230fce8246
SHA1

366d8972a354ef43472d6fb99faaa54a58a0737e
SHA256

6e5905fe71f2a311e172aa8a8e07c8dc482c72047ade81b349961a1e24110d2c
SHA512

da6b14df316a5da9d6ebcb52e24cd69f17086cd4f07c4cc92e0a55433a354e9754c8e05502a1bd9cb395521d5b72b44145f2605226fc8a0a2a404aac0a876edd
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA54lkbBo1:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rk

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e5905fe71f2a311e172aa8a8e07c8dc482c72047ade81b349961a1e24110d2c