xmrig | 37a96a82848b6318ade7c5da5c08e442d64ea2be0b55ab95972810523863be9c

General

Target

37a96a82848b6318ade7c5da5c08e442d64ea2be0b55ab95972810523863be9c
Size

2.7MB
MD5

cb627144d474aa96031ba94c089ac195
SHA1

a4d6c1302626db1f60e4954cf51554a8596bfc90
SHA256

37a96a82848b6318ade7c5da5c08e442d64ea2be0b55ab95972810523863be9c
SHA512

70139e89240863d2e5ddfd9a47fc8bbbb540b6d5486978fe7e4afdd9bcb5973c76e2028581e587c5d4a3dc47aa30f39ac59c0e06b789b8d273bdea03d12f2a85
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMk+QqGRjj3LJR/LS:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RN

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a96a82848b6318ade7c5da5c08e442d64ea2be0b55ab95972810523863be9c