xmrig | 57996eee8756d9353464d6b58437b79fa2e5e840b676980a7da7f70dc925e9d7

General

Target

57996eee8756d9353464d6b58437b79fa2e5e840b676980a7da7f70dc925e9d7
Size

2.9MB
MD5

1832e05e7947394b0db112c1547ff564
SHA1

c62eec96aa8c34eb53769c9090d8e076e3ee1813
SHA256

57996eee8756d9353464d6b58437b79fa2e5e840b676980a7da7f70dc925e9d7
SHA512

9d8ca1e1da9ab8e40ea4e12ead543b7119195ea0e0352035dd4d90ae941718d5a2e9cd89d8dfe35f2578141b36acccdf942c6b0d923049e507902c26ca9ab8cb
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/mls:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R0

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57996eee8756d9353464d6b58437b79fa2e5e840b676980a7da7f70dc925e9d7