xmrig | 1fe6a553c5fec590442fd8d73ca2b4ec7197d1f991815ca4b2de32f2c551a55b

General

Target

1fe6a553c5fec590442fd8d73ca2b4ec7197d1f991815ca4b2de32f2c551a55b
Size

2.7MB
MD5

2a00bf404a5d2ab5ae822b8cb661a98f
SHA1

47c63b457b32a79c099924eac2fa719f3006e4d5
SHA256

1fe6a553c5fec590442fd8d73ca2b4ec7197d1f991815ca4b2de32f2c551a55b
SHA512

b90a2df65df54f2e72cd21c80bb1dd2bb8624dd7b4405456cf968b2d0b20e15be75d2a8cf041a02bc2f008d12d4d0d2ca3298703cb650edf323db814a32e797d
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQGQBC385o:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R7

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fe6a553c5fec590442fd8d73ca2b4ec7197d1f991815ca4b2de32f2c551a55b