xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-0ef4e919cc419f018cc362075179112d18f14019857d11ccb62497907238c0c0

General

Target

HEUR-Trojan.Win32.Miner.pef-0ef4e919cc419f018cc362075179112d18f14019857d11ccb62497907238c0c0
Size

2.5MB
MD5

5b8cf95a6596a5fcdfedd29f79140a5d
SHA1

b1c2b3bb6f39304f50bde4be1becdd3a37ee0348
SHA256

0ef4e919cc419f018cc362075179112d18f14019857d11ccb62497907238c0c0
SHA512

b52b69199db21a60b5341dbe70033f98c7aacaf84fc9fa489eff65ebfe708faf7dc6203415664621071231b5600a623ce044c07ce554a2a401cef2c02775cbf9
SSDEEP

49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzzxTMS8TgF9BI:N0GnJMOWPClFdx6e0EALKWVTffZiPAcg

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-0ef4e919cc419f018cc362075179112d18f14019857d11ccb62497907238c0c0