General

  • Target

    virussign.com_fefda8d094ab960ff21362baeb6513e0.vir

  • Size

    1.2MB

  • MD5

    fefda8d094ab960ff21362baeb6513e0

  • SHA1

    8e1641cb6bcdc04c4a94978c66a844353d049aa6

  • SHA256

    d42cb50b290a4372964b5b716c9b8be9706e10f815dacfcff7572d9dd57758e4

  • SHA512

    cfc4494980a04748b86d8a821cfc885eb1c3a9516cf9db404e7bf032d2bc56c8b0a20bd1aab0aded810f83e4de7fd2661b2f1deeed7f9733bb49d902de7a57aa

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYsfLGrAvWWXkCRgx6nU8Uywj2:Lz071uv4BPMkibTIA5sf6r+W4AQ5

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_fefda8d094ab960ff21362baeb6513e0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections