xmrig | 51cb8537a5d0446a068e71cc6c0f692b2d3dcacd60223ef404eeb0a9a049b68d

General

Target

51cb8537a5d0446a068e71cc6c0f692b2d3dcacd60223ef404eeb0a9a049b68d
Size

2.6MB
MD5

5656eb147f920dfd4c0cd4cfdfd266ae
SHA1

711f184e11db464d05a3ab3595f9b8b326398dbb
SHA256

51cb8537a5d0446a068e71cc6c0f692b2d3dcacd60223ef404eeb0a9a049b68d
SHA512

28ceaf343f665328730cde9d393c878383c0f52496826a70aabc99bc2bf106bfae66aef5c74fab22227d92e86c6710c0d3a1419fa90c2024396ead2e7973d769
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQ7:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Ry

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51cb8537a5d0446a068e71cc6c0f692b2d3dcacd60223ef404eeb0a9a049b68d