xmrig | a8f9fb0b14e82b91161f8921e572ff496be30b07bc35d90acf312d7ee63c4b90

General

Target

a8f9fb0b14e82b91161f8921e572ff496be30b07bc35d90acf312d7ee63c4b90
Size

3.0MB
MD5

7d9d09a33c6e456f1287d9b5d39d865d
SHA1

29123f6846ebecc7e3540e053eb3f1c43dbca6fc
SHA256

a8f9fb0b14e82b91161f8921e572ff496be30b07bc35d90acf312d7ee63c4b90
SHA512

166c9248963a074d9de6b60f16a1f12d6ef7041b19f8a498ff36da8e7c0a082f5f66b87b05abb54e1f3f4137c0b8a30b7f0d2f5f9798f96323fd6c9d3d955201
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5LDGTUXaA:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rl

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8f9fb0b14e82b91161f8921e572ff496be30b07bc35d90acf312d7ee63c4b90