xmrig | b2fc56b7d6edfcd057817793d068c6dd5ae2b7e8175dff5a092fb83dffc77c2d

General

Target

b2fc56b7d6edfcd057817793d068c6dd5ae2b7e8175dff5a092fb83dffc77c2d
Size

2.8MB
MD5

8f818ebfb13ff82aa5dbe014cb7552b4
SHA1

d9e914d0d145983612c85da58ee3104c99fe39d6
SHA256

b2fc56b7d6edfcd057817793d068c6dd5ae2b7e8175dff5a092fb83dffc77c2d
SHA512

34064f08ede2cd8d03d5939ec83d40624b65798267c7889fd40cd31beb8bbff857e1862f6ac269b92a8f53ff31d1e8493e4bc6c74d1b4eb0699fde2b7099b4e0
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkiqtI+ijRzY8GUt:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R9

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2fc56b7d6edfcd057817793d068c6dd5ae2b7e8175dff5a092fb83dffc77c2d