xmrig | 8af958a2cba2e514596a0dfaa9dd270564b356a75f47169ed30bddd8c7014aa2

General

Target

8af958a2cba2e514596a0dfaa9dd270564b356a75f47169ed30bddd8c7014aa2
Size

2.5MB
MD5

7b8aebb081e144613ac3064d3a018c90
SHA1

bf5c47dbd727b2e2061c38d2acf7ecc2ed013d17
SHA256

8af958a2cba2e514596a0dfaa9dd270564b356a75f47169ed30bddd8c7014aa2
SHA512

67a791df38fa982cc92500bf89a120304d8324ae76dfeecc32ba308e621ea7d503b05ef055533c6d730293d8337aaf416c6dfffb611beae19dd21cc8c590839b
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyWvW/XfDOy28:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RF

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8af958a2cba2e514596a0dfaa9dd270564b356a75f47169ed30bddd8c7014aa2