xmrig | ee18d0b251e88ac682bc854d91d5d07a1317b6cb81da4cb10c2f1da6bbbd1f3a

General

Target

ee18d0b251e88ac682bc854d91d5d07a1317b6cb81da4cb10c2f1da6bbbd1f3a
Size

2.7MB
MD5

5c374cb2c14c30dfb10af9876e117c80
SHA1

5fc2fee2b1d3f123c9ebfddc8aeee55dbbe14f36
SHA256

ee18d0b251e88ac682bc854d91d5d07a1317b6cb81da4cb10c2f1da6bbbd1f3a
SHA512

695767954623c18569e7a8d4adde7c886e0d45b891e4d26686bf93d29fad24a98c53bc50d70e2a496df45d0d0303a5ad09861f12f4eb92ec120e58197bd299f7
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfZFOw:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R1

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee18d0b251e88ac682bc854d91d5d07a1317b6cb81da4cb10c2f1da6bbbd1f3a