xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-6d5a8c538e1e1d5764d3e07acdd6fa2145127b07d480260c3fcf026819095c1f

General

Target

HEUR-Trojan.Win32.Miner.pef-6d5a8c538e1e1d5764d3e07acdd6fa2145127b07d480260c3fcf026819095c1f
Size

2.9MB
MD5

9042e9979f81a53aa61b9e8e5f8bd3a4
SHA1

ce1554a8231e29a0d165a5f788329ef2d82f7b0d
SHA256

6d5a8c538e1e1d5764d3e07acdd6fa2145127b07d480260c3fcf026819095c1f
SHA512

881082610b605d2142aeb21d94908490b9835301c567b88e9ed201b5bdffc3614da3abf2ef15a1948fd05c52fa57adbcef7e86cb53e9906c897291c18b095fab
SSDEEP

49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcqMHdoMv:N0GnJMOWPClFdx6e0EALKWVTffZiPAcP

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-6d5a8c538e1e1d5764d3e07acdd6fa2145127b07d480260c3fcf026819095c1f