xmrig | 33eea9b1dc1b0b26a378fab121ddc185504969af924e74211207107a31bf86a0

General

Target

33eea9b1dc1b0b26a378fab121ddc185504969af924e74211207107a31bf86a0
Size

2.8MB
MD5

8586ee65c7395fdfff5bd9cbc012ec40
SHA1

56f21d0ec268a11f6e0df7be770d5c5cd866af6a
SHA256

33eea9b1dc1b0b26a378fab121ddc185504969af924e74211207107a31bf86a0
SHA512

3d836f0ce8a7ae14da83f6707d38e4f22d1b8c228142012c8d8f750ea17f3ee271b652b666472c20173b2ee3cbbe4aa3725717e22bb6c09d6a726841c93c52de
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5BXH6wrrV:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RV

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33eea9b1dc1b0b26a378fab121ddc185504969af924e74211207107a31bf86a0