xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-48facb755f17d251d92994f9f08afcd963f310d00b5656142866947011d5fd98

General

Target

HEUR-Trojan.Win32.Miner.gen-48facb755f17d251d92994f9f08afcd963f310d00b5656142866947011d5fd98
Size

2.5MB
MD5

3461187a84cde3af3ec70713ecd455ce
SHA1

a0791563eaab335eb8fcf5ab95c39e1099263d86
SHA256

48facb755f17d251d92994f9f08afcd963f310d00b5656142866947011d5fd98
SHA512

74523dfa56ecffca7c09bdd3348fdce16c5b148bbc4d25eb4cd905c2cfdef8200ce841db404e471db3edfacb7b2abecff0d8411dabab76c86b93e6c16574d06d
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEdMKPFo8zEpXF:BemTLkNdfE0pZrV56utgpPFoF

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-48facb755f17d251d92994f9f08afcd963f310d00b5656142866947011d5fd98