xmrig | 04b2a463e7c5f7b9303079fc5ae8e4ae58b44a83d291d6cf4e75c54062130a51

General

Target

04b2a463e7c5f7b9303079fc5ae8e4ae58b44a83d291d6cf4e75c54062130a51
Size

2.3MB
MD5

978bef2768b307e71c01ffd3c3ec796d
SHA1

a5b806a6f4e80897b469c6a95348e2c45f02042d
SHA256

04b2a463e7c5f7b9303079fc5ae8e4ae58b44a83d291d6cf4e75c54062130a51
SHA512

d1743ae6e264bf24ec39775472328da7700b82480dfb1b41a64a67833515e2c08eb6cf751935f7f2576ec8c59ff3f6f6b933d8121b045afd20ccb459bad030c5
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wKSB:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Ro

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b2a463e7c5f7b9303079fc5ae8e4ae58b44a83d291d6cf4e75c54062130a51