xmrig | d471bc7696cf094f23d6cc73e9cf502658e77e33c04b08904107ddf8730f5a7f

General

Target

d471bc7696cf094f23d6cc73e9cf502658e77e33c04b08904107ddf8730f5a7f
Size

2.6MB
MD5

6fc623bd1ee246d78be32b9d9aeef832
SHA1

3e65546f9460152ee22781be41bb4b4915f4e348
SHA256

d471bc7696cf094f23d6cc73e9cf502658e77e33c04b08904107ddf8730f5a7f
SHA512

a2093ab350e89056d4cc2ce052d273a9674ea46621895287d3d1a0265517d04b45548195e4cd7022d403adb127363ef79197264d148bdb15c9573dd35ea32178
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16BvZF:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rj

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d471bc7696cf094f23d6cc73e9cf502658e77e33c04b08904107ddf8730f5a7f