xmrig | c79bce6c3eee6794637dee81ad2422fa56e04dcf6d7f8a6f9c92e1bce1c4fb36

General

Target

c79bce6c3eee6794637dee81ad2422fa56e04dcf6d7f8a6f9c92e1bce1c4fb36
Size

3.9MB
MD5

887cea6aba34f7bc62aad589133f0055
SHA1

0477e5a759d640d9edf9d71985bfa9776f332538
SHA256

c79bce6c3eee6794637dee81ad2422fa56e04dcf6d7f8a6f9c92e1bce1c4fb36
SHA512

720794628c31abafa26e727d2c3033b03e4cf0d5fd9e8cd6cf8831d606b5c90b23f8142674a3c4ef0dc9252c3f6f679ff6c493c6c816b085b8a2bd9cf8f717ab
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWg:SbBeSFkc

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c79bce6c3eee6794637dee81ad2422fa56e04dcf6d7f8a6f9c92e1bce1c4fb36