xmrig | 349b0eb2e2d036514caa6ad4bf6a2e2542ef1a4c358d96a066505d9d3ae8b8fb

General

Target

349b0eb2e2d036514caa6ad4bf6a2e2542ef1a4c358d96a066505d9d3ae8b8fb
Size

2.9MB
MD5

00dd769166b6c0d2a46206eb7e9dd82c
SHA1

639fc826a05f6c35cb8376524c78b9e0003a89d3
SHA256

349b0eb2e2d036514caa6ad4bf6a2e2542ef1a4c358d96a066505d9d3ae8b8fb
SHA512

0c50d442d48ee49b62adafb36cf2ec6209d4621aadb6bec364957ad0cc46e601c845e0354b55557d4fa6ed23eb18411962db0d2dc578a4f24c873033161df626
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wKV7hjSeS:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RG

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
349b0eb2e2d036514caa6ad4bf6a2e2542ef1a4c358d96a066505d9d3ae8b8fb