xmrig | 687308b53473e21cc32c57b8d637507964d70b7fbd51f97480fdf90565c33218

General

Target

687308b53473e21cc32c57b8d637507964d70b7fbd51f97480fdf90565c33218
Size

2.8MB
MD5

3a9bbb48cc9c452cee840b3c5d65ddf7
SHA1

51339850314eca82cb26d556188c062c152d9864
SHA256

687308b53473e21cc32c57b8d637507964d70b7fbd51f97480fdf90565c33218
SHA512

e91634ddc419e7b703f7d988ba497cdbabeefec79559bb2c8f5145d74916c9c1a1ce274a0d685e3913cab980414b82820e572e7f05d916f51339bcee4b457bc3
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6NsIRxDm:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rz

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
687308b53473e21cc32c57b8d637507964d70b7fbd51f97480fdf90565c33218