xmrig | 27461b8a460bd7a3ed49fac804a45bba0660cd4d2c0b61bbf50ff5fb27eceea8

General

Target

27461b8a460bd7a3ed49fac804a45bba0660cd4d2c0b61bbf50ff5fb27eceea8
Size

3.0MB
MD5

3dcd218660d6054240cc7ad19b6c1078
SHA1

6eaab556d4a1a5f2ab4d3f9cc461030998f77100
SHA256

27461b8a460bd7a3ed49fac804a45bba0660cd4d2c0b61bbf50ff5fb27eceea8
SHA512

1038a01cff5d286c7372d60152224cc4851ae1b4a9fe441ef6dcf4bfa40965e0928f8d4f552ef9343f154190013a1868dc123d123034f3c0ce6f1fd57eb3070c
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CnfLv3zQXtT0:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rx

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27461b8a460bd7a3ed49fac804a45bba0660cd4d2c0b61bbf50ff5fb27eceea8