xmrig | 2579a9ccecddaa24caab396acd79808249b01418650698fa9cd49655b886bafc

General

Target

2579a9ccecddaa24caab396acd79808249b01418650698fa9cd49655b886bafc
Size

3.0MB
MD5

56861f5746650ac966ef44b9fcbca314
SHA1

845efca9facc0d69105080f46121ed44d3d40634
SHA256

2579a9ccecddaa24caab396acd79808249b01418650698fa9cd49655b886bafc
SHA512

e89b68ee55fd69fb8f3dfe330a58778545f664e2226120b5186b713a366781b399f91cb6c0e883536683a445ba30bc60288b64c5de7246ec8231468b52688f82
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0INFWEWBN4t:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RR

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2579a9ccecddaa24caab396acd79808249b01418650698fa9cd49655b886bafc