xmrig | be9afa9458b9959d6de9c10b58413cbcdd282df2ae22b8cf36e70133e3a3a72c

General

Target

be9afa9458b9959d6de9c10b58413cbcdd282df2ae22b8cf36e70133e3a3a72c
Size

2.7MB
MD5

27b861a93b9d977d64559fc95f38ceb3
SHA1

362b25a1e2bb0fd3190d6a1718cbc17cd9406068
SHA256

be9afa9458b9959d6de9c10b58413cbcdd282df2ae22b8cf36e70133e3a3a72c
SHA512

acbb286972e7990ca175290ee7bd33359430959134e1c107c594845b29c2eebdb3d0bae5134d476791ace728040dfb51cadca14eaa00332bc0107cc92dd9076e
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfZFOth:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RC

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be9afa9458b9959d6de9c10b58413cbcdd282df2ae22b8cf36e70133e3a3a72c