xmrig | HEUR-Trojan[.]Win32[.]Miner[.]pef-8c150e05b3b4547f6b805312aab3fce01d646cc7de5e83d2f13b782365e996d1

General

Target

HEUR-Trojan.Win32.Miner.pef-8c150e05b3b4547f6b805312aab3fce01d646cc7de5e83d2f13b782365e996d1
Size

2.2MB
MD5

eb0ef5d1547b59a75a19fbd1a407058d
SHA1

9599ac16e5c1208f4f78f9cf0500dfe57b4730f7
SHA256

8c150e05b3b4547f6b805312aab3fce01d646cc7de5e83d2f13b782365e996d1
SHA512

b0262f5810fff6f9cf78b8d7ae3f5c2cc8323fcc0791834467c2fb23165bba5153ed6537a4bace7606b6d53a8229257b7a509e74428db53c39271210cb471c9e
SSDEEP

49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJxhWW:N0GnJMOWPClFdx6e0EALKWVTffZiPAcP

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Miner.pef-8c150e05b3b4547f6b805312aab3fce01d646cc7de5e83d2f13b782365e996d1