xmrig | d0c1fd087a92135805a6c9074167e97e96c143160219abc26fc97b7adeb40008

General

Target

d0c1fd087a92135805a6c9074167e97e96c143160219abc26fc97b7adeb40008
Size

2.6MB
MD5

84699f47096014ba660635851edc8819
SHA1

1f115b169e8f6fd9536d5b5e2cc1f7300d04ad8f
SHA256

d0c1fd087a92135805a6c9074167e97e96c143160219abc26fc97b7adeb40008
SHA512

a107282c1d27abc77ac4f1baa915f0a2ddd67ae6067e48fc2b31122781a36ffbb6c087568650f58c85e3a6b76f4caf53f20e38256eea96276f474c8d75e563a3
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wKe6Ww5Wt:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Re

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0c1fd087a92135805a6c9074167e97e96c143160219abc26fc97b7adeb40008