xmrig | c70e0ef9a63a202bea1d6b8eac809bae4514b7a83d92e867599c5ac44bb5ae77

General

Target

c70e0ef9a63a202bea1d6b8eac809bae4514b7a83d92e867599c5ac44bb5ae77
Size

2.6MB
MD5

35720a12cc07498259617ebfe5db5760
SHA1

16bfbf0e352d5e7b05d604ff499d9858d0c208dc
SHA256

c70e0ef9a63a202bea1d6b8eac809bae4514b7a83d92e867599c5ac44bb5ae77
SHA512

59387a11ae7541235fc03482638e1fc0d2135a4681834c23a7312b3234ed54d2d96273eaaa2f9321b761ae7a095488943942a829d5314d62528f85aae59302d0
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16BWgacw:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RU

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c70e0ef9a63a202bea1d6b8eac809bae4514b7a83d92e867599c5ac44bb5ae77