xmrig | 7ee0d60aafa2d80f6e2d54c1011b12530f3f09477b30ddca76f461fd697031d2

General

Target

7ee0d60aafa2d80f6e2d54c1011b12530f3f09477b30ddca76f461fd697031d2
Size

2.7MB
MD5

489f39ffc8d165669f48e8e730da4be9
SHA1

c8835230520f4ab95c803781a653ab462c7e192d
SHA256

7ee0d60aafa2d80f6e2d54c1011b12530f3f09477b30ddca76f461fd697031d2
SHA512

49143dfcfd4d7baa480ae64cde52d49f88c6febd6e19a05571adf02cd9b9e5066121b15f14480dc448cbf0da6be143262ab9d9acb86ed370eba4d164d63aa2da
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/R+t:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R9

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ee0d60aafa2d80f6e2d54c1011b12530f3f09477b30ddca76f461fd697031d2