xmrig | d81580cc239e92625543abc61f445c2fa1ffe2c2850ec0990a1c2f3fffba2855

General

Target

d81580cc239e92625543abc61f445c2fa1ffe2c2850ec0990a1c2f3fffba2855
Size

2.9MB
MD5

d4f07caca22607a495012f73193ab36a
SHA1

103eee765afb7df7a8f26d5e604cd215e065971e
SHA256

d81580cc239e92625543abc61f445c2fa1ffe2c2850ec0990a1c2f3fffba2855
SHA512

c771db82a5e05128a6dd1f1afca135b3aff83d2c3c6347293a299a15e8da8d5e19e14eaf66ed61793f8a14fb100cd4c977d547d6581679dcb9a897a4750fdcf0
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16BvZX7y:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RA

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d81580cc239e92625543abc61f445c2fa1ffe2c2850ec0990a1c2f3fffba2855