xmrig | 26856b79119dd332c7d97a8d07ca883fabb4a214b50dc77be20610cce94e0bc3

General

Target

26856b79119dd332c7d97a8d07ca883fabb4a214b50dc77be20610cce94e0bc3
Size

2.6MB
MD5

fad9d9a61852f4df7f9cac4e037d472d
SHA1

2f0fce389e46249d915ecd70dc4654e42001e71c
SHA256

26856b79119dd332c7d97a8d07ca883fabb4a214b50dc77be20610cce94e0bc3
SHA512

301311a99e582baa86f68d231ee46f480844ea0310c59f3eea6253aa09bb9a8d9f2a04788a3d6a5b328d9361b96bb9fde8d2ee23ee737822dad90af729eb65d2
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/mCJ:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Ru

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26856b79119dd332c7d97a8d07ca883fabb4a214b50dc77be20610cce94e0bc3