xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-2a89b4072c22826976be2b0aa243d73203c3025b79246a011115f84580fee232

General

Target

HEUR-Trojan.Win32.Miner.pef-2a89b4072c22826976be2b0aa243d73203c3025b79246a011115f84580fee232
Size

2.9MB
MD5

f573921f3c31af213a817507c8139fd9
SHA1

af2a75cc620e45cbd5d94fb455e975f6a0ee8372
SHA256

2a89b4072c22826976be2b0aa243d73203c3025b79246a011115f84580fee232
SHA512

27b8d10f963313163b7b749ff827506665efe7446c2b2db3deda4a6996cb7b3dc45f06bb00479312aa73db673f0f0fa7c542345794bea559f02fbaa85d98fbf6
SSDEEP

49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUSuAQSz4awhW:N0GnJMOWPClFdx6e0EALKWVTffZiPAcr

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-2a89b4072c22826976be2b0aa243d73203c3025b79246a011115f84580fee232