xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-1e9916c0959e379d73e7592d7e78671924bb18c7cf80269cf91032e54c942ce0

General

Target

HEUR-Trojan.Win32.Miner.pef-1e9916c0959e379d73e7592d7e78671924bb18c7cf80269cf91032e54c942ce0
Size

2.6MB
MD5

58ff90c1f49f53fdefc13e76004b4718
SHA1

99653db71f9f9d9b043a788426954f4d4f473f65
SHA256

1e9916c0959e379d73e7592d7e78671924bb18c7cf80269cf91032e54c942ce0
SHA512

2c7b1acb798a42205b84ccdf5d70d6fcb9c48db53e0798f5fc5649078d9c8da92c9876e020ed5805d255eba109b5ba036143a932f8491b009b13d7f12738fbe8
SSDEEP

49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dzcdy/cYH0sky:N0GnJMOWPClFdx6e0EALKWVTffZiPAc9

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-1e9916c0959e379d73e7592d7e78671924bb18c7cf80269cf91032e54c942ce0