xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-8186aa33b6a8b29174f96fbec3766863e0b5e9932dd8a2255ac6d22cc9961925

General

Target

HEUR-Trojan.Win32.Miner.gen-8186aa33b6a8b29174f96fbec3766863e0b5e9932dd8a2255ac6d22cc9961925
Size

2.6MB
MD5

8f65dff258ba9c1628899438df409cc5
SHA1

dc12d1ec49e8a020bc278f37f1683785ae89d6b5
SHA256

8186aa33b6a8b29174f96fbec3766863e0b5e9932dd8a2255ac6d22cc9961925
SHA512

fc24efd9587a6eeb85d41c4aeb85b218316bc9db3207e26630a962453a5e09a950b3be22b29f210b54bbf517c9e7d3352cc14e6ece17c18fcab402684f986d35
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEdMKPFoDDiUlcCa:BemTLkNdfE0pZrV56utgpPFoM

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-8186aa33b6a8b29174f96fbec3766863e0b5e9932dd8a2255ac6d22cc9961925