xmrig | 41d322785dccecf814e7a8a215349c5e586b43e9adf65a0b8b2f442e8b7a0b92

General

Target

41d322785dccecf814e7a8a215349c5e586b43e9adf65a0b8b2f442e8b7a0b92
Size

2.7MB
MD5

2b7e48e41d0a6df6c83c5f7ea2cfeec2
SHA1

f55f8efae0781702ba73028a4aefee5242ed0aa6
SHA256

41d322785dccecf814e7a8a215349c5e586b43e9adf65a0b8b2f442e8b7a0b92
SHA512

f39992af9868f9fec68aa6ddf7b9be134f62be5fa0e87e08f9364d59ee9fc0e9d1070b4339ddb2de27cf1c2f84511b9050b49ad547156722fc8c3e86bcf57a22
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8Cnki2WGclg:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RE

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41d322785dccecf814e7a8a215349c5e586b43e9adf65a0b8b2f442e8b7a0b92