xmrig | deepseek_powershell_20260817_33ae63[.]ps1

General

Target
deepseek_powershell_20260817_33ae63.ps1
Size 4KB
Sample260817-sqqlbatare
SHA256 bc610b668b684bd249670da640c8fb30083408836e288982a088ee7823838ded
MD5 8184e636b9967060bd8c0498640370bc
SHA1 06b04521119e3ae83d3d7cf8334c7950afc9cd80
SHA512 5eb8ee660202d6fbeac73d2a9ccabfc6b35c20d702e83a00b6cef863efc3080d536b583b05d65ced0047abfeff2aebc9905639616daacca32a44d6865786f9cd
SSDEEP 96:qJFTkFw9Akv8ZUQOqoD1UMnu+GGRD0w38/zNYMRLJaZ/8ImPUeQLyaxnjlYF+MEe:qrck0eQfWBnxb8LNBRLJMkIUxQLyaxnw
TLSH
T145A1211AE27993619BDF5427A5CD53435C8700372605AD2430ADC6C97F68BBCC7AB387
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

miner xmrig

Language

Source

URLs

exe.dropper
https://github.com/xmrig/xmrig/releases/download/v6.21.0/xmrig-6.21.0-msvc-win64.zip

Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	family_xmrig_powershell_dropper

SHA256 bc610b668b684bd249670da640c8fb30083408836e288982a088ee7823838ded
MD5 8184e636b9967060bd8c0498640370bc
SHA1 06b04521119e3ae83d3d7cf8334c7950afc9cd80
SHA512 5eb8ee660202d6fbeac73d2a9ccabfc6b35c20d702e83a00b6cef863efc3080d536b583b05d65ced0047abfeff2aebc9905639616daacca32a44d6865786f9cd
SSDEEP 96:qJFTkFw9Akv8ZUQOqoD1UMnu+GGRD0w38/zNYMRLJaZ/8ImPUeQLyaxnjlYF+MEe:qrck0eQfWBnxb8LNBRLJMkIUxQLyaxnw
TLSH
T145A1211AE27993619BDF5427A5CD53435C8700372605AD2430ADC6C97F68BBCC7AB387
MD5 SHA1 SHA512 SSDEEP TLSH