General

  • Target

    virussign.com_6872557ad4b3bf8e790f61b3989a53e0.vir

  • Size

    1.6MB

  • MD5

    6872557ad4b3bf8e790f61b3989a53e0

  • SHA1

    a293aea8ce7d4528a9d4ec90bab774f125ba7924

  • SHA256

    bb886441fb03bc11cd8a0e67034d29ea6daf4aabd51d3db97727478297208680

  • SHA512

    cb15119505fcf2d12b9b6c18c0ede151c8d89ddf7f34896521fa39bdde0c37926e0d704d3f486926f5e782d06bed091a8d25171b8bf888b59f267a04d8001c70

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8Bl6rM1u471mNtcgiTiBLCXAj++fI:ROdWCCi7/rahwNUMuikLCiJCF+QT1HAo

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_6872557ad4b3bf8e790f61b3989a53e0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections