xmrig | 2db87588fddbe04c9dcd8605898b56a7f594809a56920eacd6ad7565395cb11d

General

Target

2db87588fddbe04c9dcd8605898b56a7f594809a56920eacd6ad7565395cb11d
Size

2.9MB
MD5

203cee867b069717aeeb8c3687bad6ac
SHA1

28a17f90770fd73bcada4f30320e3b57b7a966f9
SHA256

2db87588fddbe04c9dcd8605898b56a7f594809a56920eacd6ad7565395cb11d
SHA512

c3ac98e8446fcfd5713af0ec34e807b5e6a77f8981d23bd20eb0079cff5f74a0c933aad204f3334a587ea8bd6fd6f7470ad786b0039b4244bdbaf3775416503b
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkivwSbaMr82:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R3

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2db87588fddbe04c9dcd8605898b56a7f594809a56920eacd6ad7565395cb11d