xmrig | b7a03565e48f8292cd0a65b01bf84fd44660e691c492ebe5823b9c3430b9e10b

General

Target

b7a03565e48f8292cd0a65b01bf84fd44660e691c492ebe5823b9c3430b9e10b
Size

2.8MB
MD5

69914007f45f719f368b91d82185b366
SHA1

2ff84603a654f82cf517e2a11a8a991792b8f53f
SHA256

b7a03565e48f8292cd0a65b01bf84fd44660e691c492ebe5823b9c3430b9e10b
SHA512

5eb9b457e60f191f78c60ea62b04e5b3ac4149cd8c49e60574cc2c17e1265db3a1a0f8e953b14399ab2055b8366aac2dde221fab3ebe1037f7e90fd44db0322c
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/mpS:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RS

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a03565e48f8292cd0a65b01bf84fd44660e691c492ebe5823b9c3430b9e10b