General

  • Target

    virussign.com_f075209c8eb7fcf97099502c06740870.vir

  • Size

    1.8MB

  • MD5

    f075209c8eb7fcf97099502c06740870

  • SHA1

    2e626e63baefb9e271e056f49ddff52b01921648

  • SHA256

    fe7801c4e1a0423e6da6a17e5895d5765b5e79f41fb51e87931683a2684f5a9d

  • SHA512

    0bce81d52d67f707208b67189b8021750c1df41158932fe1683015fe217fe1fbc650cf729abb076d5256a99059d77b3b3322494b99beca23c0869d61ebe3c110

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727f8UhNnXIhz24GtdhUYpAal4jZnwMWmzyh5sj7A21u:ROdWCCi7/rahUUvXjVTXptRmKWXcCYi8

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_f075209c8eb7fcf97099502c06740870.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections