xmrig | 980aaea07a94cde50210fd2d872dac1e36c9a5ce5333d610a941e0da1c350123

General

Target

980aaea07a94cde50210fd2d872dac1e36c9a5ce5333d610a941e0da1c350123
Size

3.2MB
MD5

4433be868c4ff3b916913c10ba989510
SHA1

65d74972fc657b0dbf72463cd801554f6713a693
SHA256

980aaea07a94cde50210fd2d872dac1e36c9a5ce5333d610a941e0da1c350123
SHA512

125629898649827796965bbc00bf6fe61d6980aaa68f6b527a13fdd6a98536de07cf460481e4f96b40608b422694ee292fc6dbe0a27c746250734f0f42fea67e
SSDEEP

98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWT:SbBeSFk3

Score

10^/10

miner upx xmrig

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
980aaea07a94cde50210fd2d872dac1e36c9a5ce5333d610a941e0da1c350123