xmrig | 6fb90d09d4e6e2f9b6655ba014643f9c310ef1df091a4eecd9e4f3bb3204eebe

General

Target

6fb90d09d4e6e2f9b6655ba014643f9c310ef1df091a4eecd9e4f3bb3204eebe
Size

2.8MB
MD5

fd9c5bebcecce582eb3cbcccec18f6a7
SHA1

51a6c6a84c97e374cadbe6e1f3f5b4547db69bd4
SHA256

6fb90d09d4e6e2f9b6655ba014643f9c310ef1df091a4eecd9e4f3bb3204eebe
SHA512

d0a7b834cf54ccfd9acf6c87a093db996bbae6c8c546054d5b4f78458d2b8fce35e920f07a68ed0b08126b21d1e4495a47e1ef0f44b03a2331a18bdcea475c88
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0I6Gz3N1pIs:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rl

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fb90d09d4e6e2f9b6655ba014643f9c310ef1df091a4eecd9e4f3bb3204eebe