xmrig | 1d5c12402c86ca34cb83e5e9ae32c452de0c4a53bb3bc71963cdfd47cbf7aae0

General

Target

1d5c12402c86ca34cb83e5e9ae32c452de0c4a53bb3bc71963cdfd47cbf7aae0
Size

2.9MB
MD5

815f4e022fc7bab1e2b9b6670c8b0690
SHA1

54dbd3c0aee5775a0ea8bd063d008f1807af56d6
SHA256

1d5c12402c86ca34cb83e5e9ae32c452de0c4a53bb3bc71963cdfd47cbf7aae0
SHA512

76d87378ad465f1e07251bf2c318cb30508a33f8140d69205d87c15ff11163c5ddf8912257384638bd59aa21161101cec4dfadcd1daa43c522c43d7fb286a542
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5JnsoyG:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rt

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d5c12402c86ca34cb83e5e9ae32c452de0c4a53bb3bc71963cdfd47cbf7aae0