xmrig | 22ca2d7b00ab08ead7a9c694972172c70b6dcf05eb9b4471a174144a9be3d663

General

Target

22ca2d7b00ab08ead7a9c694972172c70b6dcf05eb9b4471a174144a9be3d663
Size

4.3MB
MD5

0a7fd48d9a9bf6bcfb6f16230c39bd3d
SHA1

810c87a96bdf71afb9a1870cb7bf3e49b59a6dbb
SHA256

22ca2d7b00ab08ead7a9c694972172c70b6dcf05eb9b4471a174144a9be3d663
SHA512

99aa919d8bf2d0cb6c7146b837f46fe74119aa55f7c0d932a0730428c9d63edd15363fe5cf04c7a38e15b400a2a10dc128d1679be05e0fb9ec041fb9101e6dc5
SSDEEP

98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWH:7bBeSFkD

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ca2d7b00ab08ead7a9c694972172c70b6dcf05eb9b4471a174144a9be3d663