xmrig | 1e1e24474c99984d5ea60ceb134bd30323f81b501ccc0b7acbca16d2d0dabd39

General

Target

1e1e24474c99984d5ea60ceb134bd30323f81b501ccc0b7acbca16d2d0dabd39
Size

3.0MB
MD5

50b0d903935a894da9aa03d400c0820a
SHA1

eb422caca1cd37d1e61c4af4a03a8c9e0358e79b
SHA256

1e1e24474c99984d5ea60ceb134bd30323f81b501ccc0b7acbca16d2d0dabd39
SHA512

239134202a602ed451cc4802af889df4bcf9d7922f057e64344d4647d00957cebd48470ac6ccdd1d8f2e44ad58be3265daac29e826ca4b73e4127aa542e87911
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5sf6r+WVB:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RX

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e1e24474c99984d5ea60ceb134bd30323f81b501ccc0b7acbca16d2d0dabd39