xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-4271c8b6c61db65cfbaeca070a46abd1d67dd2b006982f902ab223554d57d57e

General

Target

HEUR-Trojan.Win32.Miner.gen-4271c8b6c61db65cfbaeca070a46abd1d67dd2b006982f902ab223554d57d57e
Size

1.9MB
MD5

dfc24d093002ae9fc3d25490aa8fde4b
SHA1

551cfdcb3b11e5bcc7253c176231ea4f26ce84a3
SHA256

4271c8b6c61db65cfbaeca070a46abd1d67dd2b006982f902ab223554d57d57e
SHA512

8f1de74f4e9cebcd0457cb0828a6043efb20ae3c37a9c257462d8e0e9d9252681e2a3110847cbc48449e629f5e79ad2cb5f65a335314a3bd55401c1de48d3fbd
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIQHxpWftbKs:BemTLkNdfE0pZrQ2

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-4271c8b6c61db65cfbaeca070a46abd1d67dd2b006982f902ab223554d57d57e