xmrig | 14e1e7bd47e9f6d01bcf8741495b359e599127a3f9e562efdfe718c664116b79

General

Target

14e1e7bd47e9f6d01bcf8741495b359e599127a3f9e562efdfe718c664116b79
Size

3.0MB
MD5

19d42bb34a118f7da22bf5b2ffbc7e65
SHA1

092e0398605b6c5ce7473661f0a3c946b3dab0b9
SHA256

14e1e7bd47e9f6d01bcf8741495b359e599127a3f9e562efdfe718c664116b79
SHA512

581248352eaf26f5d0838d2ca5c1bb7628cfe688e4037e47760e7efad77c011bcf5bc0dc2728d91454402234cdee2a549728a730efeef0994c5dec412a131b88
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5CJ3jkM:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RG

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e1e7bd47e9f6d01bcf8741495b359e599127a3f9e562efdfe718c664116b79