xmrig | d041f0355fef10788d15ec4b90b4540594cbb00f7cd53c9aa9405f57e4bd83c4

General

Target

d041f0355fef10788d15ec4b90b4540594cbb00f7cd53c9aa9405f57e4bd83c4
Size

2.7MB
MD5

fbb76f5f8de2b30c7eb08c390078031c
SHA1

336179be8c02276ec70bd94b06aaf9ff0282ec18
SHA256

d041f0355fef10788d15ec4b90b4540594cbb00f7cd53c9aa9405f57e4bd83c4
SHA512

4d07aee0f4eff5e419c213246c8026bc314adde8ad0b94a6b7ce09c0c99a3b6b6735ea30bb7f58cceadf978a5fd23907fa507312339035407ca122758fd4df4f
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0INx29L5KQ2T:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RJ

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d041f0355fef10788d15ec4b90b4540594cbb00f7cd53c9aa9405f57e4bd83c4