xmrig | 41e4ab020898b07cdc4f98da9c8b0a5054ded83f0ffdc4bc9c8980319cb465df

General

Target

41e4ab020898b07cdc4f98da9c8b0a5054ded83f0ffdc4bc9c8980319cb465df
Size

2.9MB
MD5

4b86d7067f07be39bee3df261479e010
SHA1

0009f6a86aa107a30b9a02fb7827335eeff62039
SHA256

41e4ab020898b07cdc4f98da9c8b0a5054ded83f0ffdc4bc9c8980319cb465df
SHA512

fa3f14b39461a1d4831a422f58b512e1fecf4165e8067adc1ef038ce86f607544cfdf9d4b1a92ffec550d9c1531d7c327c9670f82e0a59ad6a31b5a6d06cf2fb
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0I6Gz3N1pHVk:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Ru

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e4ab020898b07cdc4f98da9c8b0a5054ded83f0ffdc4bc9c8980319cb465df