xmrig | 554961fee2d1ad5f12a10fad466527f9c584592d1082d5fa008d1f3f7b2c8d3c

General

Target

554961fee2d1ad5f12a10fad466527f9c584592d1082d5fa008d1f3f7b2c8d3c
Size

2.6MB
MD5

3105a36d0e65e748fc53313c627b002b
SHA1

92ed21f1175388599fe76309251e20623fa6ee06
SHA256

554961fee2d1ad5f12a10fad466527f9c584592d1082d5fa008d1f3f7b2c8d3c
SHA512

3aeec687640cedd37192c7fb24f1b0377ba471b45a7e8f727e71b217ba16032dbb7377a6a7cfda81deb32e3f3b60d5a0eece9636088b10cc40c2288a06e5d601
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16BvZX7r:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R5

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
554961fee2d1ad5f12a10fad466527f9c584592d1082d5fa008d1f3f7b2c8d3c