xmrig | 93641813b84a4306f6b798f815ed3ef47bba95a24cbd6611d66eb7edc6361468

General

Target

93641813b84a4306f6b798f815ed3ef47bba95a24cbd6611d66eb7edc6361468
Size

2.8MB
MD5

695e2e1dd27ea9ff8083752c110f2ee8
SHA1

252d93770e36c38e1ce6ec6e9652914f9a15bd00
SHA256

93641813b84a4306f6b798f815ed3ef47bba95a24cbd6611d66eb7edc6361468
SHA512

805b42b4f378c1fbb1762c56ebee2278538fcc415bf38c4db75d7238b6d4010a636cf498a08c43307b1e276908cab043db526cd0b52de87f4478497ed7a35fc2
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IEFToflErS:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RT

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93641813b84a4306f6b798f815ed3ef47bba95a24cbd6611d66eb7edc6361468