xmrig | 69f1e52c28d5d8884a001292a35da4ee8a059c42d84b95671d4b9ecaf9b149b2

General

Target

69f1e52c28d5d8884a001292a35da4ee8a059c42d84b95671d4b9ecaf9b149b2
Size

3.0MB
MD5

672cd5103555c2415de2db48a1aee5ad
SHA1

a0499164d41b859f2c4b4791e79de8902fdcf8b5
SHA256

69f1e52c28d5d8884a001292a35da4ee8a059c42d84b95671d4b9ecaf9b149b2
SHA512

9e0a7b0a1c95f89f6988da8013ecad44411d7b092684b1e60b4a812f391015c66f97fd63bdc43750053cb50f6393d08f1c3d400baece187475ae6c8cb175ab8f
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IEFTon538B2:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R1

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69f1e52c28d5d8884a001292a35da4ee8a059c42d84b95671d4b9ecaf9b149b2