xmrig | ab07ff922d0f9f88a2889bd9a5dc7a3e85ab58af4bb74c337a09a8e6977364fa

General

Target

ab07ff922d0f9f88a2889bd9a5dc7a3e85ab58af4bb74c337a09a8e6977364fa
Size

2.9MB
MD5

7320bf2121a0c6b015fa547e17831d81
SHA1

f27782e19afe7d49e6d36ad987be92bc5c9282ca
SHA256

ab07ff922d0f9f88a2889bd9a5dc7a3e85ab58af4bb74c337a09a8e6977364fa
SHA512

cb44d0e35ffb7f123c11dd52bd4a9f6b5a1bd26a535e44945696531758683db1f3f90553fd74ec9a19660926d2d9298e7070ebc9361881777a5ebad53a3c20af
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wKV7hjSeV:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rh

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab07ff922d0f9f88a2889bd9a5dc7a3e85ab58af4bb74c337a09a8e6977364fa