General

  • Target

    virussign.com_2eb9b938668757f9614c5440dd4c08f0.vir

  • Size

    1.5MB

  • MD5

    2eb9b938668757f9614c5440dd4c08f0

  • SHA1

    14b3956f9b86e5455fb2fadc7d63610ae42e2c28

  • SHA256

    503a54363c2cf57537cf76d9f0243373a8300bf2e1ac8cb1d4ced5c3d43ff222

  • SHA512

    9555c9da0a263db32f7d49d12a47e7f4032e7e37fd9b91daab54f2c6a80300f742653caed7ceb5e758f90d7c041d70cefeae6a471cc7c0a59b6413262d9a3a68

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgcdt9vvQNs9TJ0qFo8M7Bw:knw9oUUEEDl+xTMS8Tg3avLog

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_2eb9b938668757f9614c5440dd4c08f0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections