xmrig | c06278fefc487df22c4ec430639d9890da2e4dbd0e1ec45269cfda54fd593850

General

Target

c06278fefc487df22c4ec430639d9890da2e4dbd0e1ec45269cfda54fd593850
Size

2.7MB
MD5

e69aa0c899a9887f38e7c26072d01d3c
SHA1

d71d8394fdf6c15e846b8fbae481f8862bb0826a
SHA256

c06278fefc487df22c4ec430639d9890da2e4dbd0e1ec45269cfda54fd593850
SHA512

6610878bce8118d02c91f32cd2e62b51f21f295784f69cdc1c832395a2743ec274c1eda5b4de939a631b1d7e7314650416a74e6c24ffccd7aa305f784bcb0278
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/R+:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RJ

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c06278fefc487df22c4ec430639d9890da2e4dbd0e1ec45269cfda54fd593850