xmrig | 4d8109b1e944d50595a134ca53772a1c3e77025c29b6069ce48cacbdd9600326

General

Target

4d8109b1e944d50595a134ca53772a1c3e77025c29b6069ce48cacbdd9600326
Size

2.8MB
MD5

3ca8bbd827f05bc8e63488380c7ba257
SHA1

4ae625a051383ea3e2c70df412cf98997f8e0a76
SHA256

4d8109b1e944d50595a134ca53772a1c3e77025c29b6069ce48cacbdd9600326
SHA512

cdac99d60b22333b49480ce4b50b5720bc916686323e6459d8df3e8cc223c382ca8103895f9c6a7f31da3e3a3dea9a5df3ad574d1ae86e132093fe7b3e1091fd
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkiqtI+ijRzY8Gt:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Ro

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d8109b1e944d50595a134ca53772a1c3e77025c29b6069ce48cacbdd9600326