General

  • Target

    virussign.com_0d8cdaa102663253c7d02b1c92474190.vir

  • Size

    1.5MB

  • MD5

    0d8cdaa102663253c7d02b1c92474190

  • SHA1

    582d31ef19540f73fc7615c6926fb36250f12055

  • SHA256

    45709229edeaed9130f81bcb32438906ffccec61870bd5cc0db8eaa0910cf692

  • SHA512

    a66f1da880ca362f179feaeacd48fc22f1c47aab437b70926fb6f3fe5f1b2deb9b13843adec965586f7ee37c39361637fb9aa01474dbe890d8a134f498b747ee

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DX+qtrL:ROdWCCi7/raU56uL3pgrCEdM/GtaH

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_0d8cdaa102663253c7d02b1c92474190.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections