Overview

overview

10

Static

static

10

virussign....50.exe

windows7-x64

10

virussign....50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virussign.com_e6f9f87f9eaca8cca1cc5d21ccfe7550.vir

  • Size

    1.5MB

  • MD5

    e6f9f87f9eaca8cca1cc5d21ccfe7550

  • SHA1

    043870300b8ef3a57c80e2c1b138f73936399483

  • SHA256

    a8829bfa686fc255145d7654d2924c4ac821ff6059d1a099c23195a89738b448

  • SHA512

    36e5b84f3b5b4354cb29fcf6dc25502426226f8fcba31553514386ad0ba946a37c152412d1d3ecd6e933061fa44ebfb16b6aa3ed43b489e151a21c6988dd6a3c

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFDnFelw+HT8V1NCgvY8R3E11YtF+:ROdWCCi7/rahOYFbewWv/D

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_e6f9f87f9eaca8cca1cc5d21ccfe7550.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections