xmrig | edc5fc9c8f711bd615f67ec8ebcc2ddc0478a788db694b3019401eb94f210e8e

General

Target

edc5fc9c8f711bd615f67ec8ebcc2ddc0478a788db694b3019401eb94f210e8e
Size

2.8MB
MD5

0aa1b50b5a378c8465f0cec7314cffd6
SHA1

b3dfc2ba2afc8e235ffd1d242de5e3cce201215f
SHA256

edc5fc9c8f711bd615f67ec8ebcc2ddc0478a788db694b3019401eb94f210e8e
SHA512

6aaf2eb248b62137d3f1f411ca0ef1a80faecc3c5add1e302ebc420f636681805931acb01b27687732365725ce47acd90c74741a64b4d3c77eb38729320c8acc
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8Cnki2WGcf:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rd

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edc5fc9c8f711bd615f67ec8ebcc2ddc0478a788db694b3019401eb94f210e8e