xmrig | HEUR-Trojan-PSW[.]Win32[.]Fareit[.]gen-648857e3738da40a6a46f84ca8c7142bca18b42a1e7f5c0eeae5da04294d64a7

General

Target

HEUR-Trojan-PSW.Win32.Fareit.gen-648857e3738da40a6a46f84ca8c7142bca18b42a1e7f5c0eeae5da04294d64a7
Size

1.7MB
MD5

af89c1aea574e8e239e0a4f264f180b4
SHA1

7c3ddf6316ff634c93eb8645a5051d9d267f4790
SHA256

648857e3738da40a6a46f84ca8c7142bca18b42a1e7f5c0eeae5da04294d64a7
SHA512

3e3894a05330aa72f828ab59c4f286246d5e935722534e0e3923fe738ca986ec53c66a7a822308d54e7fd6ffb4fcec3fd85cf4a55756085166ae4b8411bb4608
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIQFBxkFV4d:BemTLkNdfE0pZrQh

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan-PSW.Win32.Fareit.gen-648857e3738da40a6a46f84ca8c7142bca18b42a1e7f5c0eeae5da04294d64a7