xmrig | a20d03232a6a5fbabbbf27958343da7a66088bfc9d0ffb70fc59697eddb982c4

General

Target

a20d03232a6a5fbabbbf27958343da7a66088bfc9d0ffb70fc59697eddb982c4
Size

2.6MB
MD5

0958629a8ea294d2c8104842f92e71ea
SHA1

210b34c6c42e222c292b160edb47f2b9ea78bf2e
SHA256

a20d03232a6a5fbabbbf27958343da7a66088bfc9d0ffb70fc59697eddb982c4
SHA512

94c365d5371a01a833b42d2179e20dae2fd876e574aea80c9d684148298e1bda6c431ef60e2ec7dd7ab647cf48f83e88e5f63a598e20d0a85ff8dba14f68bf8e
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/Ru9:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R9

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a20d03232a6a5fbabbbf27958343da7a66088bfc9d0ffb70fc59697eddb982c4