xmrig | f08e8db6d19709c1b009789007f2f308ee322bee1809128566bc485174e2a2a9

General

Target

f08e8db6d19709c1b009789007f2f308ee322bee1809128566bc485174e2a2a9
Size

3.0MB
MD5

b3eea37799d41784bb4fb3dfb17b6d11
SHA1

84ead5b53e5da7ec4cb36cb595a4fc2bef412f22
SHA256

f08e8db6d19709c1b009789007f2f308ee322bee1809128566bc485174e2a2a9
SHA512

466d50ad4617520713723e502acc57c16f814989f972eabb7f014d9a5870e0bd3ac13df36f6558bf78f164fdc88c98fcc9e22f651a72b788cdc4c4579ef068e3
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfZFOzw:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RL

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f08e8db6d19709c1b009789007f2f308ee322bee1809128566bc485174e2a2a9