xmrig | 2984961a2af4ab92eb5ad98af97f7d9ac4cdbb5eb87eb86d4f51212d0d2a5223

General

Target

2984961a2af4ab92eb5ad98af97f7d9ac4cdbb5eb87eb86d4f51212d0d2a5223
Size

2.6MB
MD5

18be08fcb8e637e172dcfaa4323fa697
SHA1

97a5dbbbcb87d39f179b5623cd2fae2715d57f84
SHA256

2984961a2af4ab92eb5ad98af97f7d9ac4cdbb5eb87eb86d4f51212d0d2a5223
SHA512

3571f4192ff21deca276f276dddd265e06ed70a05181fbd1e64f6f9e7456f3db1cbe46098c7519eeb637343800eb0be79902546c245c18666cbe3a07e3e9ff5a
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5sf6r+W44:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RN

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2984961a2af4ab92eb5ad98af97f7d9ac4cdbb5eb87eb86d4f51212d0d2a5223