xmrig | ad810123627e035c0929c522e31cb0d2dadbe5a1bf51e5534cf383e1c3d82e04

General

Target

ad810123627e035c0929c522e31cb0d2dadbe5a1bf51e5534cf383e1c3d82e04
Size

2.8MB
MD5

17aad4db5b7c1a7869044acab4b7997a
SHA1

def6697bef542cdb7922449e9881496a755b3d18
SHA256

ad810123627e035c0929c522e31cb0d2dadbe5a1bf51e5534cf383e1c3d82e04
SHA512

457a1dc8bde74193c73ce030295f9eb90d93d61d400274e5b9375f0e4fcb85e3650662052cad310919d9a1538451484baf65bbf4604ec6d8e183ccee5c290cab
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wKV7hjSey:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Ru

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad810123627e035c0929c522e31cb0d2dadbe5a1bf51e5534cf383e1c3d82e04