xmrig | cb6d91ae35639b31663b80842b33b5f623a28f0c9a9215a9556a748e4f8b2863

General

Target

cb6d91ae35639b31663b80842b33b5f623a28f0c9a9215a9556a748e4f8b2863
Size

2.9MB
MD5

da1829e2b82ca3180d27e3136d426bd1
SHA1

55303b5e608a3699a479de4469c9fd6c47702e06
SHA256

cb6d91ae35639b31663b80842b33b5f623a28f0c9a9215a9556a748e4f8b2863
SHA512

e1dd158eda1443d83d8d260b3bd7bc4e220a76269990799f865d9fb9321c818ee491f1dbf2160128d79e7e39638ae44f7a678217cfe591d815f47f57b482a930
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16BvZXBc:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rg

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb6d91ae35639b31663b80842b33b5f623a28f0c9a9215a9556a748e4f8b2863