General

  • Target

    virussign.com_a211d2fb798c5639fd0d05ff21c0ac70.vir

  • Size

    1.5MB

  • MD5

    a211d2fb798c5639fd0d05ff21c0ac70

  • SHA1

    b031b4dba1b35c18cb8d828bd4308ed1a69d0b0b

  • SHA256

    40fb4fcb1461c3cab81322c81aea09238ebf55b41eca8fb024d950dbe2491170

  • SHA512

    ceef132868d5b2ee9dcc124870c609e90bf6426a7563c0c6c8d5285808086a1ece4f3284dfbba37129ef970b478fcff37370914a4465b0030c5dd18223e776af

  • SSDEEP

    24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv32wTlvck3AWsu4Jsej9Y:BezaTF8FcNkNdfE0pZ9ozt4wIXxeHNsT

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_a211d2fb798c5639fd0d05ff21c0ac70.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections