xmrig | 5680f283072ab5a204e58734f1abc857c13d4cbe1d5fefd69200732b51ca7d65

General

Target

5680f283072ab5a204e58734f1abc857c13d4cbe1d5fefd69200732b51ca7d65
Size

3.0MB
MD5

6922be2b05b74df9292d2194f15e5e80
SHA1

5ff7b9e43d82712f7957c2d01632f2194e46b882
SHA256

5680f283072ab5a204e58734f1abc857c13d4cbe1d5fefd69200732b51ca7d65
SHA512

80e791031aa9850017498b3738b311a2e85fd21a6fdc8ef409fb326e2d6abc7bdddb9a3fc9eebac8f408c3d516eb74126f81fe00da23ddcb6b0b949049f15e82
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdk2a2yKmktEy:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Ro

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5680f283072ab5a204e58734f1abc857c13d4cbe1d5fefd69200732b51ca7d65