xmrig | dbbb023e410611fee42ca66f54e25329094644d1121926eb42b7ffe553f798b8

General

Target

dbbb023e410611fee42ca66f54e25329094644d1121926eb42b7ffe553f798b8
Size

2.5MB
MD5

a8bd75b2f3a9608eb1c284fcfc757aed
SHA1

b967ca8c051633ccd6fd78992aadbcab883c19a8
SHA256

dbbb023e410611fee42ca66f54e25329094644d1121926eb42b7ffe553f798b8
SHA512

c5877bc69523f8c9fc815871f1e1c0c258fdd00f3805d21b23ba7430920efde12960a34569aa87fb5e6cc5cd28e019d5e8b07ead0ed8a363b8d12cad8438ea78
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdk2a7/:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RX

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbbb023e410611fee42ca66f54e25329094644d1121926eb42b7ffe553f798b8