Resubmissions

28/05/2024, 19:45

240528-ygq4daag36 10

28/05/2024, 19:40

240528-ydqnfaae87 10

General

  • Target

    virussign.com_5a1b29f417eccff818eba5b6fa179ac0.vir

  • Size

    1.8MB

  • MD5

    5a1b29f417eccff818eba5b6fa179ac0

  • SHA1

    126edf81fe43d583284bdd02a45f251ee3ed920f

  • SHA256

    5c88654e47bfe2dbabda7420f21daef1738f539133f69630ff8dcfaaf29e2b45

  • SHA512

    655989b1c1499e10241c830696a3c2def1695612ca43818986bf263242f231d48903f15104bc670739a9e0f391cf4e5575700a126d3c05fefe1fe9c287dfcab8

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjpbc8nJwbomvu2Nrlum7+a7EtLgCPimzE:Lz071uv4BPMkHC0IBcAUNRSa7kj5zE

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_5a1b29f417eccff818eba5b6fa179ac0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections