xmrig | 20037f7c3dcc204850670ccef981c2525d4223f491b0672c8f5dcadce0c341b4

General

Target

20037f7c3dcc204850670ccef981c2525d4223f491b0672c8f5dcadce0c341b4
Size

3.0MB
MD5

59107cbec72f17c201042e767ec9b40a
SHA1

ce91f34331b66ca900fccd30e23e4cf37bdeb410
SHA256

20037f7c3dcc204850670ccef981c2525d4223f491b0672c8f5dcadce0c341b4
SHA512

cfa5cbdac88825077faf263e4e6ff8efcbb20d849329ca86f77330b4e75e3e2ca91102c50f0728aed253561716cd22dbaa8f705953b243f8a879a00f3d456826
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfZFOzbw:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RT

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20037f7c3dcc204850670ccef981c2525d4223f491b0672c8f5dcadce0c341b4