xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-d138e3e276a80c57d7cedfe911fa758eede410c483aef57f94d7a140a9860a3a

General

Target

HEUR-Trojan.Win32.Miner.gen-d138e3e276a80c57d7cedfe911fa758eede410c483aef57f94d7a140a9860a3a
Size

2.7MB
MD5

a3fd41b911815119a1d723e9dca245ee
SHA1

e34f3452e9f615b8712a029de4ca6cd483c158ca
SHA256

d138e3e276a80c57d7cedfe911fa758eede410c483aef57f94d7a140a9860a3a
SHA512

fd7185ca732439e05dde3c871882b5e4cee9eab47f796eb272bb07c5f4aa96bc34853ec77fce0f1524848d75920e7ff2e29ad674822784f61dc7e93fa5f27637
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEdMKPFoTzDRF2:BemTLkNdfE0pZrV56utgpPFom

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-d138e3e276a80c57d7cedfe911fa758eede410c483aef57f94d7a140a9860a3a