xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-3c5fccac7938579a9dad35b2cc641f2b77e03df391f714615b4725741c845a56

General

Target

HEUR-Trojan.Win32.Miner.pef-3c5fccac7938579a9dad35b2cc641f2b77e03df391f714615b4725741c845a56
Size

2.7MB
MD5

14ece529e22dda2f194c9cdfea5cea5c
SHA1

e730abc59d6ee29379bffa391b4d28c3da21d5be
SHA256

3c5fccac7938579a9dad35b2cc641f2b77e03df391f714615b4725741c845a56
SHA512

ccc8ca4b2144bfd8c478781d2d9a3d48935857cfb95d7acf9e352b5de175f0224bdb2c133415dd7c5eb3d0cdb8377de2a9dee82545ce2ddb1e751c4d1ee190c9
SSDEEP

49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJuJPCrvcr:N0GnJMOWPClFdx6e0EALKWVTffZiPAcO

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-3c5fccac7938579a9dad35b2cc641f2b77e03df391f714615b4725741c845a56