Overview

overview

10

Static

static

10

virussign....b0.exe

ubuntu-24.04-amd64

Sharing

Copy URL Twitter E-mail

General

  • Target

    240602-wyg6paad7s_pw_infected.zip

  • Size

    1.2MB

  • MD5

    a9b9247d69c6e2271be1db599de3e5a0

  • SHA1

    cce926570c4d5ef1ea4ac92327fa38d66fb536c1

  • SHA256

    7ce8d8209fcafc12b2ee191e4bb8bb381d3d0f3bfd95f6446b5b7552b17a883c

  • SHA512

    f2a73cbefbaccc107035651d1d4df7128ccdce73311d5e7ac25b3262ab5a737998df764f1e7b3036efa540e5b2df81e3aec34b7626549c005f24e36f0a800352

  • SSDEEP

    24576:pUw+RauNsFs/qCsSE1oHv0Qty8mZOZF79VO0ljB97LC3pELbYCejreIGxp9G6fsl:pUwwasN/qRSE1oHs53ZOZF79c4B9C3p3

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 240602-wyg6paad7s_pw_infected.zip
    .zip

    Password: infected

  • virussign.com_837c00b323483236965ee4a9debb59b0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections