xmrig | HEUR-Trojan-PSW[.]Win32[.]Fareit[.]gen-a8029e502e9dad69b22a02bc4ccd2f9846fba7dcb34bd9f9cd7f513fe4877cc1

General

Target

HEUR-Trojan-PSW.Win32.Fareit.gen-a8029e502e9dad69b22a02bc4ccd2f9846fba7dcb34bd9f9cd7f513fe4877cc1
Size

1.6MB
MD5

1904bfe588c859f339c9fbad322231ae
SHA1

6f976b7aea320e24587ece2209e162c02f89e2d8
SHA256

a8029e502e9dad69b22a02bc4ccd2f9846fba7dcb34bd9f9cd7f513fe4877cc1
SHA512

a87c39fe7901d9671c99abf106689badf81fdfc97b3dc13ef473b10acce432dbd1d68b6277d76847b130de15dbf6993568488be179d43d4ebb0c1807215f9f64
SSDEEP

24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpuzBF6727HeoPO+XC7A9GQ:BezaTF8FcNkNdfE0pZ9ozt4wIQOYkL8

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan-PSW.Win32.Fareit.gen-a8029e502e9dad69b22a02bc4ccd2f9846fba7dcb34bd9f9cd7f513fe4877cc1