xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-83b657f13d15378a3a1e0067e4ebe0d5f35c8107246ce732f5a191201126ccff

General

Target

HEUR-Trojan.Win32.Miner.pef-83b657f13d15378a3a1e0067e4ebe0d5f35c8107246ce732f5a191201126ccff
Size

3.1MB
MD5

b76b4c11ac85429f54364af6fdc627f4
SHA1

3db8d63150e924630964320a214a10cdae9b3bfc
SHA256

83b657f13d15378a3a1e0067e4ebe0d5f35c8107246ce732f5a191201126ccff
SHA512

0d00116f7eb13af7f5f2341940f23fe9d83ec3a3a8ecd53d8ef9f15dbfb227e3125153e972c14f241b6564a96eefb8b3cc04b8587101fd6cb387d884e1e3209f
SSDEEP

98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4K:NFWPClFa

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-83b657f13d15378a3a1e0067e4ebe0d5f35c8107246ce732f5a191201126ccff