xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-2cb4137cb4b708e7928ccba3049d0b6362e000d63fe7eaaecbba86c0106ed444

General

Target

HEUR-Trojan.Win32.Miner.pef-2cb4137cb4b708e7928ccba3049d0b6362e000d63fe7eaaecbba86c0106ed444
Size

3.1MB
MD5

64176b552403b47719a130606035bbc3
SHA1

94a89bde6a9041a3792184bed0fa917c9671a0dd
SHA256

2cb4137cb4b708e7928ccba3049d0b6362e000d63fe7eaaecbba86c0106ed444
SHA512

c339bce6c9e5707939d162d525639f83affdaf9df0c335eba153df1a10527c0070a9e4a814f3fba05227f047618675d20c51088c5d31da0f2c40735c48b073f1
SSDEEP

98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4R:NFWPClFh

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-2cb4137cb4b708e7928ccba3049d0b6362e000d63fe7eaaecbba86c0106ed444