Overview

overview

10

Static

static

10

virussign....70.exe

windows7-x64

10

virussign....70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virussign.com_391a3648a1967989c99c8a08868fe970.vir

  • Size

    1.3MB

  • MD5

    391a3648a1967989c99c8a08868fe970

  • SHA1

    6c7ff81e3f398304edb3179b4893d2471f084bd2

  • SHA256

    2a2cb1ee801c3f4adfb03af389392cc5292ce583c95af8f1d2bf615817abaaa5

  • SHA512

    835f2456f9a9bd4630fc36ba9aad3fd344c11fa8a4909c49e396b4ef4f4800a07a408788e880ff636a210a66fd90e6a50548868456dcbceb368a26f9541d1009

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwd+t56p6aGugPbxyx924ZPxWzk6RHoL:knw9oUUEEDlnd+XRqgA2GgCL

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_391a3648a1967989c99c8a08868fe970.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections