xmrig | e78ce3f14d83a9617fc740d9d6a63bc51e8863a939f7c341ca639ce3bffb4ca7

General

Target

e78ce3f14d83a9617fc740d9d6a63bc51e8863a939f7c341ca639ce3bffb4ca7
Size

2.8MB
MD5

a8b4bb887bc5ab74d3f7a0feab8d86a5
SHA1

0c5336c78049774867d1bc8386e54e108617a287
SHA256

e78ce3f14d83a9617fc740d9d6a63bc51e8863a939f7c341ca639ce3bffb4ca7
SHA512

de967229d512efaa100c3882a348b8a55d870cfb3103f43424a7209beabb096c0388a0bb23f67acb37adf69108b8f78d2692b6b726add5d99ffebfcba64b5653
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/Rk9:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R5

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e78ce3f14d83a9617fc740d9d6a63bc51e8863a939f7c341ca639ce3bffb4ca7