xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-67a5f0711bc5e729359a07e89d6d6adc909a596ad2c0de4a5eaebe83ffe53383

General

Target

HEUR-Trojan.Win32.Miner.gen-67a5f0711bc5e729359a07e89d6d6adc909a596ad2c0de4a5eaebe83ffe53383
Size

2.6MB
MD5

ed05e08a36ee3214835a2add56de7cf2
SHA1

426a022c8375613d358b2bd726f49c53ec485cf4
SHA256

67a5f0711bc5e729359a07e89d6d6adc909a596ad2c0de4a5eaebe83ffe53383
SHA512

00ac53d72e1e4f4518522eb29be6ceeb204bb74ca65de4d53f84c5c4214064a1990fd32ae5dd047553696b4fab17d33ae83362468e63f3bb311d966646b791eb
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEdMKPFoTzRCzDqc:BemTLkNdfE0pZrV56utgpPFo6

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-67a5f0711bc5e729359a07e89d6d6adc909a596ad2c0de4a5eaebe83ffe53383