xmrig | f136d1f720c6b9ae238a0240c5c6726ef800c3f3866027dd03594fbc8b6b47b4

General

Target

f136d1f720c6b9ae238a0240c5c6726ef800c3f3866027dd03594fbc8b6b47b4
Size

2.8MB
MD5

8b6815a1c3a23ea236b4537f675bb170
SHA1

ebac1fe06fa6b09aaea3646d9babb8e36b4e6d1b
SHA256

f136d1f720c6b9ae238a0240c5c6726ef800c3f3866027dd03594fbc8b6b47b4
SHA512

e7f8994a38d53db1f8ede8abcf1a8e08467268bb3cd5651b8e9829e0baf3916a77ecb9c711d8418ca81990e5e25964c28d38c2b33f4ae2b54dba3e2cbe102cb8
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6NsIRxDJ:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rk

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f136d1f720c6b9ae238a0240c5c6726ef800c3f3866027dd03594fbc8b6b47b4