Overview

overview

10

Static

static

10

virussign....a0.exe

windows7-x64

10

virussign....a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virussign.com_a2782407fd6539e142c600ee1e2e13a0.vir

  • Size

    1.6MB

  • MD5

    a2782407fd6539e142c600ee1e2e13a0

  • SHA1

    54683b414d0476ca0ee28fb8b359c89d04a06244

  • SHA256

    525902c81147216c708a8e89381dad1dedb0321ee7bb89b4583e5cc06eea23c9

  • SHA512

    3b9ebf1d625eda56e51a25afd4fcf44f994004fd9c3d4e019cf87147195df8e7ae88f391f7837aad9485818d7ec1b72701635ab8e3c5017ef2eb30f8b4a69e9e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYtgWqabE1y14AH8C:Lz071uv4BPMkHC0IEFTo/abRAuAY

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_a2782407fd6539e142c600ee1e2e13a0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections