General

  • Target

    virussign.com_39cf50d70e0cd004f8860a6bb9dd8a50.vir

  • Size

    3.0MB

  • MD5

    39cf50d70e0cd004f8860a6bb9dd8a50

  • SHA1

    266ade1bda8e75ac83cc1b9361f1e35b26c9b311

  • SHA256

    127a62941a4bc2bfb1a68fc6ce44f693b171a467fda5b4f0be0946b806cea98d

  • SHA512

    3caf41bd053711136925390108f554df793c1f7b3196223dded6b04245e1dd10932fe9647ac16704aee51c62a881ab655b5a4344ce9230c2be6c9b9fac10ff8b

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40U:NFWPClFkU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_39cf50d70e0cd004f8860a6bb9dd8a50.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections