xmrig | 9eefa5d6533caf7c48320daeb62886cb1e849d1ed537355e7a78e05492212ccb

General

Target

9eefa5d6533caf7c48320daeb62886cb1e849d1ed537355e7a78e05492212ccb
Size

2.9MB
MD5

82eaba8784d87b71199a843db197dedd
SHA1

2bce17d8ef2b23547c4e5316a4a8106640bbf996
SHA256

9eefa5d6533caf7c48320daeb62886cb1e849d1ed537355e7a78e05492212ccb
SHA512

e9d96906d7fd76bf0f8c0416cb7eb2a549a01f7b97211114994abc4b56f3af5cd4364f672557778cd9e61068ac086885d6a134f75fea0688d9e99d10280a6b5c
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6NsTt2MP+:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RU

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9eefa5d6533caf7c48320daeb62886cb1e849d1ed537355e7a78e05492212ccb