xmrig | 1f73a7aaf71b4f378970fbfc51b457531cf98e3e24d892c2d242635aaec6a39b

General

Target

1f73a7aaf71b4f378970fbfc51b457531cf98e3e24d892c2d242635aaec6a39b
Size

2.1MB
MD5

88adcb1e0fac642e558e7557a280a2ea
SHA1

26113e54c6b1ab05ff4258d712a48fc5d5b83e8d
SHA256

1f73a7aaf71b4f378970fbfc51b457531cf98e3e24d892c2d242635aaec6a39b
SHA512

46303ce98efa49a41ee116d564ad4b459f5eae633aeecb1a2f793ff9c4543ccb4b3aca250780be9b0a4f479f8cc5bc32e97dacbfd47c8a6426a41c1926ea9d1f
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hm6lgqCH:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R3

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f73a7aaf71b4f378970fbfc51b457531cf98e3e24d892c2d242635aaec6a39b