General

  • Target

    virussign.com_dceed12a816d1b93bee3b3b411793c90.vir

  • Size

    1.8MB

  • MD5

    dceed12a816d1b93bee3b3b411793c90

  • SHA1

    75afc103110a657da03790b67c299ce0d7ad6f54

  • SHA256

    73e12e3808016a864cba59f1083a002c2e8c85fa6a2ebf5cc9cf1e1e9a557a9a

  • SHA512

    a0e958d01f8089e2c7ab3aaa636db4fd7fc482873fcff514b36fd57ede07878b5ce0db548652b45ec96c3af80e04133eac29768b31639351592c2bd5dd62fbe5

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7K6WefmedkVoMCr/:Lz071uv4BPMkyW10/w16BvZuaXj/

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_dceed12a816d1b93bee3b3b411793c90.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections