xmrig | f4e683b41f7a06e7a89a1ab1293bd2bf161fbb372a061506a4fa16158102ac17

General

Target

f4e683b41f7a06e7a89a1ab1293bd2bf161fbb372a061506a4fa16158102ac17
Size

2.6MB
MD5

7604752a435618c05ee40aae96216d39
SHA1

ff40ae3520027137754bc60dc2a98e103b73ab03
SHA256

f4e683b41f7a06e7a89a1ab1293bd2bf161fbb372a061506a4fa16158102ac17
SHA512

f0a85ec5c8dea1d8a19b224302ab36c958cc84c4f2a57c4e8b0066b0684cada65793864de1c54aa29c5e3392e9769e6094aa06aed9700febf931e0a90b439e92
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IEFToyC:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rj

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4e683b41f7a06e7a89a1ab1293bd2bf161fbb372a061506a4fa16158102ac17