xmrig | 11642a76db61b4babc5d73bfc0c704ef7635efeb42414156491e90898d6a4e2e

General

Target

11642a76db61b4babc5d73bfc0c704ef7635efeb42414156491e90898d6a4e2e
Size

2.9MB
MD5

59d94430126c30e305797880533567fa
SHA1

116b6a16a746197b126ee54b15ed2ca0807fa95d
SHA256

11642a76db61b4babc5d73bfc0c704ef7635efeb42414156491e90898d6a4e2e
SHA512

54dea3dbd43054fb7a12c975ffc2ea879137d93c6740a1209a5949c46bcd999dcfe4b0af6915d38643eebe8d842ae99209e4f0d8ffb29c8ecdb8a80208bd0ffc
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0I6Gz3N1p3Ek:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RJ

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11642a76db61b4babc5d73bfc0c704ef7635efeb42414156491e90898d6a4e2e