xmrig | 85519748e482ad2fbe38b6fb04786125a9f4684a41b57af3cc147022be31c4cf

General

Target

85519748e482ad2fbe38b6fb04786125a9f4684a41b57af3cc147022be31c4cf
Size

2.7MB
MD5

a515a86cc6122694832410af80b35c6e
SHA1

1ef823eb062d21751823960b2503bfad4070aa8a
SHA256

85519748e482ad2fbe38b6fb04786125a9f4684a41b57af3cc147022be31c4cf
SHA512

37ac0da126c5bf5cefba1ac50c1f2489c41ce1763324b9e4d4fc2502974849fa4a4d3bf7e89254acaeafc8b396ef6d46419eefb34b65a7cb38d0fab24d393b29
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6H:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rk

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85519748e482ad2fbe38b6fb04786125a9f4684a41b57af3cc147022be31c4cf