xmrig | 9b638fe244e524b2ce7cd84aa942f9393ed915ba77a4e68ad3f55b6e3514833a

General

Target

9b638fe244e524b2ce7cd84aa942f9393ed915ba77a4e68ad3f55b6e3514833a
Size

3.0MB
MD5

3b282af11f8b1698fa8a2856dba5745e
SHA1

a4112ac55d9e9fb36608d550cc83b787cb66ae94
SHA256

9b638fe244e524b2ce7cd84aa942f9393ed915ba77a4e68ad3f55b6e3514833a
SHA512

0f9ee60756c156d3d72738efa7e63f78d5eea17056a26b5556c6b1645dbfe775bf899cc5d9b79b6867c3c0feb8513e8369bb14b6d8e0cd8e3bf10d74ff75fb8a
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQGQK5BKrl:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RY

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b638fe244e524b2ce7cd84aa942f9393ed915ba77a4e68ad3f55b6e3514833a