xmrig | HEUR-Trojan[.]Win32[.]Miner[.]gen-db6e72cdd5cbe5c3d694348e38c0edb6f4beff6c7fb5e4be1ff2bb5a062123b8

General

Target

HEUR-Trojan.Win32.Miner.gen-db6e72cdd5cbe5c3d694348e38c0edb6f4beff6c7fb5e4be1ff2bb5a062123b8
Size

2.6MB
MD5

b2caea631b039b7c7372e9ef87432e45
SHA1

d5bd0caff737a9886875a4d085c28ffa085cb503
SHA256

db6e72cdd5cbe5c3d694348e38c0edb6f4beff6c7fb5e4be1ff2bb5a062123b8
SHA512

b6974f17a0a6cd3d6d79947711c102a8f7d5ee1496295d9f8a7e95d1c9a615bc24ea09d6307e225054d92a17bec934e352beec326aafd175ab342c534283eef8
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEdMKPFoTzRCzDq2s:BemTLkNdfE0pZrV56utgpPFov

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.gen-db6e72cdd5cbe5c3d694348e38c0edb6f4beff6c7fb5e4be1ff2bb5a062123b8