xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-3abfb6ddcf8977d6072c2647e9ce816c824f09bf939b0c5fc02f1ad5de2cfe56

General

Target

HEUR-Trojan.Win32.Miner.pef-3abfb6ddcf8977d6072c2647e9ce816c824f09bf939b0c5fc02f1ad5de2cfe56
Size

2.9MB
MD5

3e16212f3a84b85b9e0df72b07bb3897
SHA1

f72a8e6bc6482e33b13e0d11e786032c1f1cd8eb
SHA256

3abfb6ddcf8977d6072c2647e9ce816c824f09bf939b0c5fc02f1ad5de2cfe56
SHA512

132a8c61f58dda54b58f593f93901fe9bce0b741ab1543976dc0351091a246039a9fd16336cdb4f6d85fc48e2943ffd904bffc5f2906be22b18ebc025c059974
SSDEEP

49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9c87MQUnZK:N0GnJMOWPClFdx6e0EALKWVTffZiPAcO

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-3abfb6ddcf8977d6072c2647e9ce816c824f09bf939b0c5fc02f1ad5de2cfe56