xmrig | f742d273788f55eaae37586166bbd9a8ebbf3b646933d84fd266ec3876c262e9

General

Target

f742d273788f55eaae37586166bbd9a8ebbf3b646933d84fd266ec3876c262e9
Size

2.9MB
MD5

688bd26ccd90a352246eb59ebaa53435
SHA1

b15d7d65fd337ad69698fd94a42c027ec42a1932
SHA256

f742d273788f55eaae37586166bbd9a8ebbf3b646933d84fd266ec3876c262e9
SHA512

1e9b6b432304e913384ec13cd023c4eda5cc8237f9bfd1a4c99affa77adc1820e6cd5c50c226769823cc1bee451229c2d8968f0bbd8960cf7109558c3e8c9e77
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQGQBC38jw:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R1

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f742d273788f55eaae37586166bbd9a8ebbf3b646933d84fd266ec3876c262e9