xmrig | ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a

General

Target

ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a
Size

2.6MB
MD5

676be144bad2c503294a13d928ee3aa8
SHA1

92004ce8e6782d566c9c2417d4003731eacab7a8
SHA256

ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a
SHA512

1ffb5318172d3466a981aec70e4af00979598601190ffc87542cd32e5e40df89569106683cd1503e5780de36ab747aeb207ef0e1ea16128eb1053c9e5f113e90
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/uI3:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rm

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a