xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-6b86bfe6d0dd4f0bdfa1e4e9deee2d5f67eeb7cd0b2cdfda23b5112959095da7

General

Target

HEUR-Trojan.Win32.Miner.pef-6b86bfe6d0dd4f0bdfa1e4e9deee2d5f67eeb7cd0b2cdfda23b5112959095da7
Size

3.0MB
MD5

c2340f663fb329d52f55cf27f7ef6095
SHA1

8fccdcd538ce4c0bf618dbf8ace525d93bb07ae2
SHA256

6b86bfe6d0dd4f0bdfa1e4e9deee2d5f67eeb7cd0b2cdfda23b5112959095da7
SHA512

3be772f4540316fba0d1ccf6d15bb3042c2867676cb44f4dcce0f7e53d107fe258c7748543fe8672f1a12137a4c5bd58b5a1c36a5bd534baf721cca98f0367eb
SSDEEP

98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4U:NFWPClFk

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-6b86bfe6d0dd4f0bdfa1e4e9deee2d5f67eeb7cd0b2cdfda23b5112959095da7