xmrig | aef3fa4780792ea5fe14ecb85d976c00636db7c28c11a55c75ba14cd27252889

General

Target

aef3fa4780792ea5fe14ecb85d976c00636db7c28c11a55c75ba14cd27252889
Size

3.2MB
MD5

efefbab15abd36888e829c3d19e84ca4
SHA1

8231f84dc852085613615ef8a9daed3d8fef98d3
SHA256

aef3fa4780792ea5fe14ecb85d976c00636db7c28c11a55c75ba14cd27252889
SHA512

3d92aac5cd864960620725cd118272b007dcc917cc310ad9a9b0e7039ca7aa88c0af09bf42e11433fab779136e235d2dabac7c2e2cb0b67cae4ec06ee7f8338a
SSDEEP

98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWz:7bBeSFkf

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aef3fa4780792ea5fe14ecb85d976c00636db7c28c11a55c75ba14cd27252889