General

  • Target

    virussign.com_0371132881b27e870ce782d3cfd2e500.vir

  • Size

    1.8MB

  • MD5

    0371132881b27e870ce782d3cfd2e500

  • SHA1

    32d49318508f3ce7d5dddc3bc6d9abc0beba694a

  • SHA256

    cfba05c75cbe145456f9170a5fbd07592cc7019b481f03a4c0223156ca206fc7

  • SHA512

    ceb9f2887d169ee5f024216ed6e8ba1c1c8de25f94f33c3dcd1f6f70b6cab6797ad2999598437b166af7fa155b7b34aed56f8b4bb482aa8bf387e832882e8500

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXx/4S1:NABN

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_0371132881b27e870ce782d3cfd2e500.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections