General

  • Target

    virussign.com_de1f5ee6fd9cf82f7693022e86878620.vir

  • Size

    2.5MB

  • MD5

    de1f5ee6fd9cf82f7693022e86878620

  • SHA1

    f7f4bdc0c7dcd8c5ef37f21d1bbeda173fa346ef

  • SHA256

    694ca16259c9e37f728b78cfb93407ec9b3d5320a339b9bc4569b929c6c8711d

  • SHA512

    9ae0d701dead9f840f20c2e2650367d6e6bf8d7ff4870c2f2abeafcc0e5deb78283a3e970c871c9346e6f0a90944fbbb0ca409d72f97863e1973792bb2f3da7b

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcq4p9t:N0GnJMOWPClFdx6e0EALKWVTffZiPAc3

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_de1f5ee6fd9cf82f7693022e86878620.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections