xmrig | 42b00238655f571d598e56858e0cfdc1595b5d1dc34934b376861f9861aae643

General

Target

42b00238655f571d598e56858e0cfdc1595b5d1dc34934b376861f9861aae643
Size

3.1MB
MD5

5f56c6e8727e455734c0c6da1d54a4a4
SHA1

c5094f002fcb7ef9982d1aed7bd2949de829c225
SHA256

42b00238655f571d598e56858e0cfdc1595b5d1dc34934b376861f9861aae643
SHA512

f01c5e5b14c29eb84e331b686dec3252da97da8a142e7a20c87b1531031c8c0152e520ec650dc7286999b466b0a35cee30da0809ce4901619b4d1a72ec1e0347
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWq:SbBeSFke

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42b00238655f571d598e56858e0cfdc1595b5d1dc34934b376861f9861aae643