xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-b5d5e994fbac6f45ff05edb2be8c3dccbe0aedbec57c1d32bcc65729436427dc

General

Target

HEUR-Trojan.Win32.Miner.gen-b5d5e994fbac6f45ff05edb2be8c3dccbe0aedbec57c1d32bcc65729436427dc
Size

2.3MB
MD5

f8c40c292e16d0deae3115c2f74fb62a
SHA1

a5b82b4d8e9bc1cb41d032c4681b5197ef164179
SHA256

b5d5e994fbac6f45ff05edb2be8c3dccbe0aedbec57c1d32bcc65729436427dc
SHA512

9946ad174deea394fa4b4e3376a24e8f532c7371d4a26a28d99fe6540b1edd42942df6ea35c6a041f53e6506a09f9b7386df1f353e8df74c51f2967fc061a118
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEd2hXe/s7mj:BemTLkNdfE0pZrV56utgp

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-b5d5e994fbac6f45ff05edb2be8c3dccbe0aedbec57c1d32bcc65729436427dc