xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-4baa882519f3de1a2a9332a0b038dc9148370c80351d5ed9658621d6d4892a40

General

Target

HEUR-Trojan.Win32.Miner.pef-4baa882519f3de1a2a9332a0b038dc9148370c80351d5ed9658621d6d4892a40
Size

2.3MB
MD5

c3ca808893b9b993b4a1bd9a22b5f357
SHA1

6703995796886f976a773881b3d1ab36f2236ea9
SHA256

4baa882519f3de1a2a9332a0b038dc9148370c80351d5ed9658621d6d4892a40
SHA512

2fd7a4dc94053e33a7df2508c2c2aa6cabedb68a1704ca850a75b6d1d1584049e4c1ce6b457c14e9e816ecb263d4854b08cce3879d6a4413e1f3ec1d112cfea9
SSDEEP

49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcDwq6Sd0RzWDx:N0GnJMOWPClFdx6e0EALKWVTffZiPAc+

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-4baa882519f3de1a2a9332a0b038dc9148370c80351d5ed9658621d6d4892a40