General

  • Target

    virussign.com_99e49ed4601d256f09cff799de839ce0.vir

  • Size

    1.5MB

  • MD5

    99e49ed4601d256f09cff799de839ce0

  • SHA1

    6ccd029e49929244c8cc28de4d6969ab7619017c

  • SHA256

    299cf7a50745b91f99e64d88c0f7109977d055302b639f9b4ccb34722e248914

  • SHA512

    4471f8a22d031b27fb33584885307ab123d57dbfb9837f2221c1d06cb2f565fd5e3f8d53e139e238e1f18f1bfa64363c612def23bbe615b04ec51689df505467

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbfCuZXejQ7:Lz071uv4BPMkHC0IlnASEx/mCuZOjQ7

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_99e49ed4601d256f09cff799de839ce0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections