General

  • Target

    virussign.com_198a01cedeaa40fa420cef12a5fc74d0.vir

  • Size

    2.2MB

  • MD5

    198a01cedeaa40fa420cef12a5fc74d0

  • SHA1

    bf475351d99da04d0b8f4835fe8e3577f2f09b6d

  • SHA256

    241e273a9136859826919a1f0aed9ac585bd01170f27b4859019f47266902474

  • SHA512

    3764f83f8a052ef894f34f0b4db4a2068d9a47942e1ccfd0ee42d4879ee5c266b81da130544e78d60b6875c2b5ea50b57332e01260e39989661c80e335f3ff89

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcEw:N0GnJMOWPClFdx6e0EALKWVTffZiPAcU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_198a01cedeaa40fa420cef12a5fc74d0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections