xmrig | 66a3c2440fb51d6f7fb130ff44403482afea74daefe1cea6775e3a387d921703

General

Target

66a3c2440fb51d6f7fb130ff44403482afea74daefe1cea6775e3a387d921703
Size

2.3MB
MD5

10265127f29eb051fb910c2cd2647576
SHA1

e72c9f23500a211309deba47f913b7e8808343ef
SHA256

66a3c2440fb51d6f7fb130ff44403482afea74daefe1cea6775e3a387d921703
SHA512

642661954c8bfd1268130a98bf3b2a4a74a980adf5e0e7d333c4d36218169fa4b69f2794388b67c2871a0b70843d65cab0a09ea5f9e8851996b3837349f890d3
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wK6:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RM

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66a3c2440fb51d6f7fb130ff44403482afea74daefe1cea6775e3a387d921703