General
-
Target
HEUR-Trojan.Win32.Miner.pef-c238df860e71ff58299aaed0ea6b75b07796254bb14bd85dfdd874d921b4ed74
-
Size
2.5MB
-
MD5
b9bdea4a1c4911f6db440f04a65a752c
-
SHA1
44e8615d4f139aacd240c93b7f2a339b84fa9004
-
SHA256
c238df860e71ff58299aaed0ea6b75b07796254bb14bd85dfdd874d921b4ed74
-
SHA512
36f1f72573edde07a36100b2bd9328e655fc916a8451ff346cda5c93d9cf8c93f121bba15352c7767512d7f70b2b4a6574d93fb9ac16e73d664d4ee7df89526d
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjid:N0GnJMOWPClFdx6e0EALKWVTffZiPAcp
Score
10/10
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
HEUR-Trojan.Win32.Miner.pef-c238df860e71ff58299aaed0ea6b75b07796254bb14bd85dfdd874d921b4ed74
Headers
Sections