xmrig | 1c924614ebee481c2f593c686f72dbae3fe6f20e92c0934a6880498066c583b1

General

Target

1c924614ebee481c2f593c686f72dbae3fe6f20e92c0934a6880498066c583b1
Size

2.9MB
MD5

ce4175ff586330e27c3acefff092473b
SHA1

d92c84c06fd63ecb517450da4512569e0fe4c7d9
SHA256

1c924614ebee481c2f593c686f72dbae3fe6f20e92c0934a6880498066c583b1
SHA512

4ec41f3473d401a5ea9302b618548158a16acd4310d3acc4e5db71a52c7faf934f9e9cce70134cb00398eee719cd1d9072a21a027f3de8aef8ac6f0608bcf07e
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5lCx7kvRr:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R1

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c924614ebee481c2f593c686f72dbae3fe6f20e92c0934a6880498066c583b1