xmrig | 2c09c51db69db845c37639591cbdd2271019c78f81283c26c49ff55a429f8ffd

General

Target

2c09c51db69db845c37639591cbdd2271019c78f81283c26c49ff55a429f8ffd
Size

2.9MB
MD5

62e0b584f6ba4cdacea20697b53fb2b5
SHA1

333f21e7ca33e3cb6f8e32c0cdd0b35c318e2660
SHA256

2c09c51db69db845c37639591cbdd2271019c78f81283c26c49ff55a429f8ffd
SHA512

d05f8ac9cc735622c219cb35edf2f66386962c0a6ef2f75db940813e62528d3b087dc16c0e1f779d203e81d5eb22073fc3f7497c086deaab2004deccb7a2651a
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hm6lgVJUwAdF64xG0:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rw

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c09c51db69db845c37639591cbdd2271019c78f81283c26c49ff55a429f8ffd