xmrig | d92185d8d41277b019e034f32f5709c9786091f8b7e388d3e4589e0a17b225de

General

Target

d92185d8d41277b019e034f32f5709c9786091f8b7e388d3e4589e0a17b225de
Size

2.9MB
MD5

9ad191282c616bc5be350884e8cecf34
SHA1

ccc56a0f2b589b8f60ee45e783dbfb0ca53c2075
SHA256

d92185d8d41277b019e034f32f5709c9786091f8b7e388d3e4589e0a17b225de
SHA512

666c73150e2fa16da41a5823e485ed24502d5a9c07d9ad27639f2b0715d94ed54ae761ced48b16a778fe42df32e424523543b80b218e0841fe7a5a0020ed9aba
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/z+5:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RB

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d92185d8d41277b019e034f32f5709c9786091f8b7e388d3e4589e0a17b225de