xmrig | 73b8fbc621e4d530c51fc600f51627f88622a39d4fcc0f3075b173737cd88bae

General

Target

73b8fbc621e4d530c51fc600f51627f88622a39d4fcc0f3075b173737cd88bae
Size

3.3MB
MD5

225191d91822f5694d3c213b7333fedf
SHA1

c4487338c46fee61f154aad1f817cff5b15c8b3a
SHA256

73b8fbc621e4d530c51fc600f51627f88622a39d4fcc0f3075b173737cd88bae
SHA512

4a1d050e79b1eae742c025d27146f586af8cba8b9528e06ac0905c6a120772af5e6ec6a0750902368d478fdcd18aa30b1cd7edbe39d4c6d6aefe58fa76c2b254
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWT:SbBeSFk/

Score

10^/10

miner upx xmrig

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
73b8fbc621e4d530c51fc600f51627f88622a39d4fcc0f3075b173737cd88bae