General

  • Target

    virussign.com_dd0c8d38a8c5309bdf20647137a786e0.vir

  • Size

    2.6MB

  • MD5

    dd0c8d38a8c5309bdf20647137a786e0

  • SHA1

    038572de9ef21e8327f522c9a102bf62218fa90e

  • SHA256

    e95d10a7038088f63e6571ecb61a6c1d1f1f12d3a7472b73c3d3837c1a2099b5

  • SHA512

    7ed509867dbf8d6a618ff8de324ecd4999ed2e5c865433ff027297cc1edaab0bf6f81c9f8674394c8ae1d6f8fe6bb81fbd802769b6de6e88ebbd8861610e2441

  • SSDEEP

    49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzzxTMS8Tg3avLoD:w0GnJMOWPClFdx6e0EALKWVTffZiPAcj

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_dd0c8d38a8c5309bdf20647137a786e0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections