xmrig | b792de3a25087ddace45a4c4bcc98551dcd7c1de7bc769ad0979f38122fb6acc

General

Target

b792de3a25087ddace45a4c4bcc98551dcd7c1de7bc769ad0979f38122fb6acc
Size

2.5MB
MD5

05c27f1c7c0bdefbb73e9b676beb7096
SHA1

8dca23e0a90e9b4895a8b86000e195bfdb0547af
SHA256

b792de3a25087ddace45a4c4bcc98551dcd7c1de7bc769ad0979f38122fb6acc
SHA512

8bdc3be71df0a56893ebea3fa5cd0efedd83347846420bdc62d431c7172f2bbcfd29303af9b0a04f0b9645fee24e0231cbbcf6d220051e24cb73057404e1d437
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnBH:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rp

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b792de3a25087ddace45a4c4bcc98551dcd7c1de7bc769ad0979f38122fb6acc