xmrig | Trojan[.]Win64[.]DisguisedXMRigMiner[.]pz-2fcaa529968c30f73bd6e24bf81a39222f558e9d7273dfee60db81fe9654ba14N

General

Target

Trojan.Win64.DisguisedXMRigMiner.pz-2fcaa529968c30f73bd6e24bf81a39222f558e9d7273dfee60db81fe9654ba14N
Size

3.3MB
MD5

3d674aab7144919c2af3e928845f0310
SHA1

6658621746392aa834b273c1485d834df5be594d
SHA256

2fcaa529968c30f73bd6e24bf81a39222f558e9d7273dfee60db81fe9654ba14
SHA512

d38e3eb3ab449fcb42ff2c2258a61d1e1fae09cc34f5d6ce4ec699482bfe5f72847045b33cdedd416322af07d550c822b6bc4c6cec9362521e14748993154fcf
SSDEEP

98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrW0:7bBeSFkg

Score

10^/10

miner upx xmrig

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Trojan.Win64.DisguisedXMRigMiner.pz-2fcaa529968c30f73bd6e24bf81a39222f558e9d7273dfee60db81fe9654ba14N