Overview

overview

10

Static

static

10

virussign....d0.exe

windows7-x64

10

virussign....d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virussign.com_a7b7f7d4980cb3499257c277d60c62d0.vir

  • Size

    1.9MB

  • MD5

    a7b7f7d4980cb3499257c277d60c62d0

  • SHA1

    52fb6605e5d1fdabfa3fcc6580c5a40e459ff60c

  • SHA256

    386f4d3c2335f1a0e484a831af32b4468995ee007d4586d5a114c30d42e60aff

  • SHA512

    a01b9b00b0e23668a34919e647e043d483370d506667133f8c94cbe1b740e1be221e58836ff71f39a343aae2fe66226694259616038f0f5b3cee4e86d73b4406

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOMkMClbi4tFOn8rhfiG1r9/pC:knw9oUUEEDlGUh+hNfQikPYrK

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_a7b7f7d4980cb3499257c277d60c62d0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections