xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-ab7199910dac5676e09feff2e6b2596b7033b0bda7aacf4852d9fb1029bd50a0

General

Target

HEUR-Trojan.Win32.Miner.gen-ab7199910dac5676e09feff2e6b2596b7033b0bda7aacf4852d9fb1029bd50a0
Size

1.9MB
MD5

78362715fa100d92785bf54ad6e3631e
SHA1

5cfbdce82e01062b949c12d3d3b6ea50523ea6bd
SHA256

ab7199910dac5676e09feff2e6b2596b7033b0bda7aacf4852d9fb1029bd50a0
SHA512

8537142455f7cb6bed02bd756bb71a1e852ddaf6533d0af40442b5d0624099e9b5b0046cc56f7e6d65e9858846ba4bdd51629109399e5e946ceea4aa51bb2118
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIQHxWkQlIIQ:BemTLkNdfE0pZrQp

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-ab7199910dac5676e09feff2e6b2596b7033b0bda7aacf4852d9fb1029bd50a0