xmrig | 076c8f46316d23c6870e19f4f1c125d09c6e8f57b7627352e078718ae8d42857

General

Target

076c8f46316d23c6870e19f4f1c125d09c6e8f57b7627352e078718ae8d42857
Size

2.9MB
MD5

eedb9218d06484053681b71727075fcd
SHA1

df04d85b7a6d11d0e7c2be698b5d7019b2ff9272
SHA256

076c8f46316d23c6870e19f4f1c125d09c6e8f57b7627352e078718ae8d42857
SHA512

1cbec784d8492e4ca7416d18184ec1f63fa46433ff6ca2ff0aa4422d00ec82c2d4a5d2e57a457e56e310208c0f1380be11b134eef88a09acea5b65a5fe003c88
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdk2a2yKmuC:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RD

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
076c8f46316d23c6870e19f4f1c125d09c6e8f57b7627352e078718ae8d42857