General

  • Target

    virussign.com_bc3d24ff504a33f506a6bb780dc3df00.vir

  • Size

    1.5MB

  • MD5

    bc3d24ff504a33f506a6bb780dc3df00

  • SHA1

    178c00fabc627a84ba91d7f5b34697504708ea7a

  • SHA256

    edc33e9fb4ace4f61de399dda19f9f217352056f09c086e7105ddd228fd37972

  • SHA512

    986856cfd73a8eaf43367921d3a0a333071fd54c39d7bbdda3741d51342618c88e1589e7338fe28077baa178f2bf47c23638fd31a3d128ce3e88a279b839c995

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oF7u3hmxjfU3KXAnmwJThEz8tU/FVJ/x:knw9oUUEEDl3aEUiRSW2j3/xbn

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_bc3d24ff504a33f506a6bb780dc3df00.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections