General

  • Target

    virussign.com_fd4678ce7cd0c2c39dfebfc0d6ff8900.vir

  • Size

    2.7MB

  • MD5

    fd4678ce7cd0c2c39dfebfc0d6ff8900

  • SHA1

    3eeb779224518d3ce727efd1026a04a914e2f56c

  • SHA256

    4ad5ce87ea30ea5bedc724253a5c982a5eefef643c17d6315474c1791b92c5dd

  • SHA512

    847905fd32807c697b81fdc4ebde7ed55edd122e45be1db9c7b5366faad950b08a0b883352787420cf3e31152b0d620a0a1176d267355a7285582ae1ad724bf7

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/R2b:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RZ

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_fd4678ce7cd0c2c39dfebfc0d6ff8900.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections