xmrig | ec472d7e2074432651a6d97b7a170887ace3abb691839e0219a5cdbfc8e31f13

General

Target

ec472d7e2074432651a6d97b7a170887ace3abb691839e0219a5cdbfc8e31f13
Size

2.8MB
MD5

a97104212f411a83f7c31ae341907f9f
SHA1

29525584cc9e0e0c61c6861d9e1c4313f99a363f
SHA256

ec472d7e2074432651a6d97b7a170887ace3abb691839e0219a5cdbfc8e31f13
SHA512

471830a6851cddcfb8ea0c5e2f2f6b9f6720c383c81f673dd68fedeece99199948a74295065f4a3e3271834ff3d82212950b75ab4ee72e311b9a8f660844bfc5
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkivwSbaMrf248J:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RS

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec472d7e2074432651a6d97b7a170887ace3abb691839e0219a5cdbfc8e31f13