xmrig | 41f070a7fe06623d4319acd9c0d2c8a1847d490ae62857abb444b22847ef7e7e

General

Target

41f070a7fe06623d4319acd9c0d2c8a1847d490ae62857abb444b22847ef7e7e
Size

3.3MB
MD5

5755f3ed636b66235e48cd14f3636820
SHA1

8db0b23f48c859832fcf10431f0658933d8fc553
SHA256

41f070a7fe06623d4319acd9c0d2c8a1847d490ae62857abb444b22847ef7e7e
SHA512

dda9d2e1bd0535be9e61938fd9e0768acc97fc2d9227f25932e95713d693cf6325f30aaa3d1cb58192140154108c9a338ea27ef70d95414883b51a10b56d0a36
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrW6:SbBeSFk2

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f070a7fe06623d4319acd9c0d2c8a1847d490ae62857abb444b22847ef7e7e