General

  • Target

    virussign.com_1d0c5e69242701c62a537fe06c5fccc0.vir

  • Size

    2.9MB

  • MD5

    1d0c5e69242701c62a537fe06c5fccc0

  • SHA1

    56b90fb59c000eb817d3247dedd2abfae21222ec

  • SHA256

    96ce3bd5b4e75829e563fd4b4039a116d33978a9651b4f1d76e44442a4cdb16f

  • SHA512

    c2e0246982a7167c4102e72c4c543070ecb5d06ea23ab47f7526af02b157bc029ae0f98e1d7e9419af33c8a61a5af165a59796aeff008867db283ca74fb4edb5

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16BvZXBm:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RS

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_1d0c5e69242701c62a537fe06c5fccc0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections