xmrig | a340aa218518f23fff30d678184ebac4cfcdd7062de4f6fbf8378a931ab1b98d

General

Target

a340aa218518f23fff30d678184ebac4cfcdd7062de4f6fbf8378a931ab1b98d
Size

2.9MB
MD5

8c71fb626e5868b1b5ec4daeef065046
SHA1

9e0e925d14c97671203b1b1b1c0ade59241b22cb
SHA256

a340aa218518f23fff30d678184ebac4cfcdd7062de4f6fbf8378a931ab1b98d
SHA512

0d5e790a06b243e1d72dda94110ef4569daaa2a3b874c544a5a342caf21f5e540bbed8aaeb729f8295257ca31ce10e8379e1ba0b59efa341d1cea13fec161030
SSDEEP

49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdg6NsIcXq:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rc

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a340aa218518f23fff30d678184ebac4cfcdd7062de4f6fbf8378a931ab1b98d