xmrig | 8f6259397bcf0545698a7b47cf05b04f13097d3d0b258a8f1e6ae652f7127054

General

Target

8f6259397bcf0545698a7b47cf05b04f13097d3d0b258a8f1e6ae652f7127054
Size

2.9MB
MD5

472bdfdc4adbef1ac30943e06f5632a2
SHA1

9c87a1c7379679d3a212aaec6960b0e4cef17c4d
SHA256

8f6259397bcf0545698a7b47cf05b04f13097d3d0b258a8f1e6ae652f7127054
SHA512

b4544596c925203cbc4afc8e27ab600aa8100cd389c34fbabd5b04d1925a45b3c2e5add257433773d657be856c005a46a4f78f18290682ad4564e6fa3acc0d85
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6NsTt2MPc:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rq

Score

10^/10

miner upx xmrig

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8f6259397bcf0545698a7b47cf05b04f13097d3d0b258a8f1e6ae652f7127054