xmrig | 1344d29e8d394befa0b2c22e1448c8cbc65c66af3a4482346245b83bf1f6d310

General

Target

1344d29e8d394befa0b2c22e1448c8cbc65c66af3a4482346245b83bf1f6d310
Size

2.9MB
MD5

10c9cdb3bf1959378adc15cd056a5d83
SHA1

57ce573e1f107eda5b31fad8e3839c01ab98e146
SHA256

1344d29e8d394befa0b2c22e1448c8cbc65c66af3a4482346245b83bf1f6d310
SHA512

953213bf3ee95f27d3e5609ed57dc245b5087e0b77034135469026c1d5a78209ded3320c576ff87f8f12055c185ef30fe47de0685f75414b64169624aa5a8648
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16BvZ+II:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Re

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1344d29e8d394befa0b2c22e1448c8cbc65c66af3a4482346245b83bf1f6d310