xmrig | 9d2930e868071c995ab336bd7c3776110444113b0e4172b512e79fcc146accce

General

Target

9d2930e868071c995ab336bd7c3776110444113b0e4172b512e79fcc146accce
Size

2.9MB
MD5

0890d5934a24e58ba6288a36b2bb65a5
SHA1

f158aa5dfda7208498023d8edbbd699ed53b25d7
SHA256

9d2930e868071c995ab336bd7c3776110444113b0e4172b512e79fcc146accce
SHA512

64f63605663148e7a4863b8179f49db6adf49a1f672f2f1221f87be2eadac1fc8b3dc3a0fb16878beaf5bbd3c61701249a3d634ca00ed643951381a5307b979a
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQGQK5BKrm:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RD

Score

10^/10

miner upx xmrig

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9d2930e868071c995ab336bd7c3776110444113b0e4172b512e79fcc146accce