xmrig | 7d5fa14aa17d1442d1a9ca43b66f6bfe2f4f7437fcbd1ded9f078f5c2031ecee

General

Target

7d5fa14aa17d1442d1a9ca43b66f6bfe2f4f7437fcbd1ded9f078f5c2031ecee
Size

2.4MB
MD5

531d594fc79b1f5d4a78b7c039d80951
SHA1

892bc2ecad9eae84b3377bbd6c9b075840bdb2dc
SHA256

7d5fa14aa17d1442d1a9ca43b66f6bfe2f4f7437fcbd1ded9f078f5c2031ecee
SHA512

54d406a9a9dfc645462d0fc8f9601902260cd269c2562ec3f44321a4834fa185b5d4169fb66277688183e7893c6b4fc2386c3a0a5aaf97f324daab2bd43d6d20
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5sf6r+W4x:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RU

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d5fa14aa17d1442d1a9ca43b66f6bfe2f4f7437fcbd1ded9f078f5c2031ecee