General

  • Target

    virussign.com_352c9d913bd4d461417d39ec7b93e170.vir

  • Size

    1.8MB

  • MD5

    352c9d913bd4d461417d39ec7b93e170

  • SHA1

    45fc93af6299e9b5398c4b51cac812164e58ad43

  • SHA256

    584e6fbb29919bb988ca023593b015bc601008909757e04202cb96afa7f1dd8e

  • SHA512

    25f021c3f2cbe71a193040861212755e1816eacc0c5ffb0e10da53bb549132d961c1193b92312f24710e6d911ac836ca3695a43e0aa3e588b4bfe18bc114ecb7

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7K6WefmedkVoMCry:Lz071uv4BPMkyW10/w16BvZuaXjAP

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_352c9d913bd4d461417d39ec7b93e170.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections