xmrig | 337d14971f807162ad15619d52a90557f38166a3c4ba18ca009f9c14349cd1cb

General

Target

337d14971f807162ad15619d52a90557f38166a3c4ba18ca009f9c14349cd1cb
Size

3.0MB
MD5

dfbf1b1bf401607900c2612f0b68ee6d
SHA1

79a49af6193d2a92f3653529e6fa5ee6a593d09b
SHA256

337d14971f807162ad15619d52a90557f38166a3c4ba18ca009f9c14349cd1cb
SHA512

1c2075ae34aac8615ccef8b4a439f485e83648100a7be6c274373960aefdb64e1b0749ad13f57ffa997ca204d19278e5300a679ef3b7115b4b2803b3b514d5c4
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQGQK5BKrj:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rq

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337d14971f807162ad15619d52a90557f38166a3c4ba18ca009f9c14349cd1cb