General

  • Target

    virussign.com_5948b1cc69249d46ea56c385bb2cf030.vir

  • Size

    1.7MB

  • MD5

    5948b1cc69249d46ea56c385bb2cf030

  • SHA1

    9c3a3eb5edefc1d11ff8a02025a2375e4d8866f0

  • SHA256

    0e735f2d37090bfa1bc9e3eeb73fe1687b8e4e12367643e4d44e53c6872a7372

  • SHA512

    735850636bba85628e10f4bb02eb99178e61382ce35d2e4fa985a6d4709b2e757b50d09da0f00bf4f8b32ce3469acc367c8e090228f6d25181e8a522b407046a

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupQF4g6FReQwUzN6Rf06/Ia:Lz071uv4BPMki8CnfZFOzYIa

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_5948b1cc69249d46ea56c385bb2cf030.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections