General

  • Target

    virussign.com_b65a694f772a6c56a38bcf7a78823a90.vir

  • Size

    2.0MB

  • MD5

    b65a694f772a6c56a38bcf7a78823a90

  • SHA1

    05a084f42b346b327577343873eafa831673f8af

  • SHA256

    f850de63be25da934202c49a33aeca09addc15f05063c0d95d133da4198ff679

  • SHA512

    ea44583b7ac99ea926ede7230ffd86e2d1beae0a0909aa6e55803b66547a7525eea1e8ad3992b9401545a54dadd667c4c97f69df1434ad2f44bc387ef57f7ea1

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+ABcYHd9qCZK+Mc:BemTLkNdfE0pZru

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_b65a694f772a6c56a38bcf7a78823a90.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections