xmrig | 758b4797cae12654b1720fdff12d20ab5f3171b8a96e9b52de7e619795619943

General

Target

758b4797cae12654b1720fdff12d20ab5f3171b8a96e9b52de7e619795619943
Size

3.0MB
MD5

64648b906a69cfcb4af409c246e7aa76
SHA1

38d8c8e1bfcd1462e2100f41a2270fc9b2a5c8a0
SHA256

758b4797cae12654b1720fdff12d20ab5f3171b8a96e9b52de7e619795619943
SHA512

350ae06064ee6f87c2c35448753c3ef0d549c82e19ca75cf5f3c0208e3f48723a29e1df2150222c8eb6ef7d627f7eff2e3b6f725c72fd6ce5bbb497bdb6decfa
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IEFTon538gr:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rj

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
758b4797cae12654b1720fdff12d20ab5f3171b8a96e9b52de7e619795619943