xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-58d25232a5b8cabac31eda22f8ff2db1a076252171ce1fcbfa68e443bd5f9167

General

Target

HEUR-Trojan.Win32.Miner.gen-58d25232a5b8cabac31eda22f8ff2db1a076252171ce1fcbfa68e443bd5f9167
Size

2.7MB
MD5

55adf002def4497e530800d3d7c5df00
SHA1

7827e3a3ea94918db3f402be6dc3f5bdd820b71f
SHA256

58d25232a5b8cabac31eda22f8ff2db1a076252171ce1fcbfa68e443bd5f9167
SHA512

ce91fcf7ec0c55375072e67789dcabac013982d2b81f91c99b8dbf909a23ce6f780fe3f331769a43f6cf6282dba312b7a022e4261cda06ecc2f4599a6b301c47
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIQ56uL3pgrCEdTKUHiCyI8BUs91ssjmIdZJrH:BemTLkNdfE0pZrQ56utgq

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-58d25232a5b8cabac31eda22f8ff2db1a076252171ce1fcbfa68e443bd5f9167