xmrig | 27a18d15d2feff68014c2dddbf5dd687aea57828fa287ffb6be5922452a63136

General

Target

27a18d15d2feff68014c2dddbf5dd687aea57828fa287ffb6be5922452a63136
Size

2.5MB
MD5

1a3a1395bbc4b9acaabf4ca432ab3536
SHA1

9335b1486e3430f393a2f774ae2cb0c1d59ab01e
SHA256

27a18d15d2feff68014c2dddbf5dd687aea57828fa287ffb6be5922452a63136
SHA512

eda076479dac5c73dc0ecdddb831729f54d9eda135100426cc185b62d58cc336409acbec91426daf71dbbd6ca9259a57a4cda74703974dfab641eaf80de1bfe5
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0I6Gz3N1A:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Re

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a18d15d2feff68014c2dddbf5dd687aea57828fa287ffb6be5922452a63136