xmrig | 6a89ef4b7bf61a958789aa81479c006e2148ab821fb656ae0975c20c54094054

General

Target

6a89ef4b7bf61a958789aa81479c006e2148ab821fb656ae0975c20c54094054
Size

2.6MB
MD5

18d97133f269f7eca5acce4c0a8dd7b0
SHA1

e945b5ab0e8c10435131a1077faacb2d33919eab
SHA256

6a89ef4b7bf61a958789aa81479c006e2148ab821fb656ae0975c20c54094054
SHA512

19a18370898007bbeda1cae5cdfb67689e59329b2326e6411cedf3c340cde969bdb5c34558005f16f3c59ec36ea8fc6991009beebd31ac0e83f2e25da51c7fd8
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkivwSba1sC:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RI

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a89ef4b7bf61a958789aa81479c006e2148ab821fb656ae0975c20c54094054