Overview

overview

10

Static

static

10

virussign....30.exe

windows7-x64

10

virussign....30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virussign.com_f28e187c4896e3993a9e1a2371427e30.vir

  • Size

    1.3MB

  • MD5

    f28e187c4896e3993a9e1a2371427e30

  • SHA1

    9431965bbb016572338cbcc0b0c4673215b0a9e0

  • SHA256

    10d011db6d4ebe8b38c1c0437bffb0c56afcc166de3f5475dc0a848094489712

  • SHA512

    f8ffcba77fb761c9a03cd909973ca5d4db4f4243a15e8f18b5d05f16840d956493fe617bd471ada891d2799becec7713b3b8ff986a3833ae9736dc44d9fae468

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1vAq3GuLPsM:knw9oUUEEDl37jcq4nPgFWur

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_f28e187c4896e3993a9e1a2371427e30.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections