xmrig | 462775194dc17385000d84c8d1bafc174c80a564dd5fe8ebad17f9feed29803d

General

Target

462775194dc17385000d84c8d1bafc174c80a564dd5fe8ebad17f9feed29803d
Size

2.8MB
MD5

c0b337c6349e124208caca5df6e2ee4b
SHA1

34973e7bd56b8cf31191bd5cef4acfcf5fe5b508
SHA256

462775194dc17385000d84c8d1bafc174c80a564dd5fe8ebad17f9feed29803d
SHA512

0532031a33166e073b889292da9f25db8d452b14559ef336867a8e452521933bc37f002ba28290f7cf1b6170c870821a96abbbfed713e401811c456f83880cdd
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/mlg:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R4

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
462775194dc17385000d84c8d1bafc174c80a564dd5fe8ebad17f9feed29803d