xmrig | 8fc778877db2cdc8d7df6a6617aa3d0cac8e6f71daf073a5ca94d01fd570c327

General

Target

8fc778877db2cdc8d7df6a6617aa3d0cac8e6f71daf073a5ca94d01fd570c327
Size

3.2MB
MD5

9ada47a5d3d0f733c561a2b386215cad
SHA1

d9c3a75a67ad6c34a081c185d0f366c90027dded
SHA256

8fc778877db2cdc8d7df6a6617aa3d0cac8e6f71daf073a5ca94d01fd570c327
SHA512

cf5f31eb32e1c79820d8040d3fef862ade2c23750104ef9af514b7b57fb0df5fb659e8b6db7a27a27c1c7d55dcce6ca047366b68ba396efd6f27a889318a401b
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWp:SbBeSFkF

Score

10^/10

miner upx xmrig

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8fc778877db2cdc8d7df6a6617aa3d0cac8e6f71daf073a5ca94d01fd570c327