xmrig | 1ade0b0d953639768fecf92474d056f03166f30cc1d1c10b964a4026ed003818

General

Target

1ade0b0d953639768fecf92474d056f03166f30cc1d1c10b964a4026ed003818
Size

2.3MB
MD5

310f2fb8758311e080b84c206ff3aed5
SHA1

c1d59a98251dd7c32eda779042d4874cb2a0ed37
SHA256

1ade0b0d953639768fecf92474d056f03166f30cc1d1c10b964a4026ed003818
SHA512

63d61af4a28d303d766b9cae296f43c7a84da19ad466e59e8518a95d9185f1a10d60f53f3f128d7fae1c5b838673100b55a5607e383de7ed9d7db1ff51009424
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMki8CfVzz0y7:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rt

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ade0b0d953639768fecf92474d056f03166f30cc1d1c10b964a4026ed003818