Overview

overview

10

Static

static

10

HEUR-Troja...nt.exe

windows7-x64

10

HEUR-Troja...nt.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan-Dropper.Win32.Agent.pef-5f7dc5ec2ddda2b253985f5c582b66308d6d0b23c6809bcc2d1037785e2af9f7

  • Size

    1.9MB

  • MD5

    bf31ff61b98ace1556d61d07e97e974d

  • SHA1

    f1904334ef54fd2862e87b12b6b18b8751a80063

  • SHA256

    5f7dc5ec2ddda2b253985f5c582b66308d6d0b23c6809bcc2d1037785e2af9f7

  • SHA512

    152b224c5a1bca87e28b165894702f2357fb9cf2005ce1738033153d724f15f872c61d2e22cfe960d69cea6c082f4a82a052e726552e0d3eefeff4854b308077

  • SSDEEP

    49152:T1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrSax91MkibTIDiH3gtlr:T1ONtyBeSFkXV1etEKLlWUTOfeiRA2RU

Score
10/10
minerxmrig

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan-Dropper.Win32.Agent.pef-5f7dc5ec2ddda2b253985f5c582b66308d6d0b23c6809bcc2d1037785e2af9f7
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections