General

  • Target

    virussign.com_d7e8c04982a8e347aa78fe92eb158890.vir

  • Size

    2.0MB

  • MD5

    d7e8c04982a8e347aa78fe92eb158890

  • SHA1

    5cf0054ab962dde3a1f9d58734eca4c7d38aa27b

  • SHA256

    ef1bb43d3cf8eeea947b1feacbbc4655b0948f2daec48a69b5ee0bd9875f7dba

  • SHA512

    e6a845923b849e5ed5445200a470f7111e8634ee5d9a8a60f7c6bdb71eccdb6198373a60e58ab83b5a52c716c10813519690776b81b448db0e3df0503c39de6d

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIXIqndvMjn44c2Hh4YeKE5NW:BemTLkNdfE0pZr0

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_d7e8c04982a8e347aa78fe92eb158890.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections