General

  • Target

    virussign.com_20241119_LimitedFree.zip

  • Size

    28.7MB

  • MD5

    48c21d10f951b48941820cff2e23607b

  • SHA1

    9850a5f66a33e0fd54558bcfc1683b343924f104

  • SHA256

    1367de9ed9b6b8cb138b9d8860dcda9a7b4c17209dcbe90acb775f5ad26d5d4c

  • SHA512

    42691e3538c0e1127f64dd3654fdfa31c6c01c35d1068f0550d9eacb831054b641d2ffd0187deef327e8235552e971080deaa5ce860eb8ec0bd47a9e74a744b4

  • SSDEEP

    786432:ihW2jsqbW84Uo58MBH1wEtP93hiV3ZLhLfeBRg3kN+/j:iM2hW84h98EF9oV3NhLGjk7

Score
10/10

Malware Config

Signatures

  • Berbew family
  • XMRig Miner payload 4 IoCs
  • Xmrig family
  • UPX packed file 9 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 106 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_20241119_LimitedFree.zip
    .zip
  • virussign.com_0070f054c14145706565a33b924bb680.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_03a0924385387186617bd07c6ecda030.vir
    .exe windows:4 windows x86 arch:x86

    728b5168c443fc8cea3c0c483ddbb8ff


    Headers

    Imports

    Sections

  • virussign.com_06d61e52b39756a720a70e90ad903340.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_09f0ebf692adf3699a0421bc6a7faf10.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_0bd97530ec1e5d43d53b27626d1aea80.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • virussign.com_0c9e17fe513b5f1de104d494f2998d70.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_0e61528298c78f6a7e112573dc3ce6e0.vir
  • virussign.com_0f9d21c758b8cc011523bf9e4a2f1be0.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_13bceb45897e22194430d0892ba2af80.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_184d9b6c11f28a8defbfccf9d68b0b10.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_1c0f170319cf22cb2392c3605d5ba7b0.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • virussign.com_1c3ba37f815467b9adc3cbc5efd9e3f0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_20077f3b17a22a8ab92210921e155ce0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_241b879299af6cd4fee902800c7b9bb0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_27aedc6b078e8959393e6efa17563ef0.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_29b1920a14bc9d09265b1c3e18fe2600.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • virussign.com_2b4cad2883b952f2e770cfbf53b916d0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_2ee28eba09720d7cd8ea070fdd05ea80.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_32bb63c398fcfce20a79ff6b05adc2f0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_335dcb1d99a686717830e0b6a4f45af0.vir
    .dll windows:6 windows x86 arch:x86

    427c3e2166ea71a30073c3b1f9bf9ab9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virussign.com_3635d960d6269bb21b2002dcf67f7070.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_397ed43050c229d1bb2186875ff9f640.vir
    .exe windows:4 windows x86 arch:x86

    84706849fa809feaa385711a628be029


    Headers

    Imports

    Exports

    Sections

  • virussign.com_39866660c60b0e8424bcc52542965500.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_3cdd9a0f01e198af7c662b805b104700.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_409fdbcd1f6403574a124d3e0773aeb0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_43d91a2a01e49646511de301f9995be0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_4740d96c423ac69db05b4b904a812100.vir
    .exe windows:6 windows x86 arch:x86

    b5e7f4b4f0d98d809d04c3a874c687da


    Headers

    Imports

    Sections

  • virussign.com_495c7ef62b3dec66ab048b33012bdc10.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • virussign.com_4b33d731c30f34992b6f9b3d023e45f0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_4e94c4edf9b7cb790d1d827621e123d0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_520b410fbb9abac3add6fdbd8944ce90.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_554590b805c51b5e883f55dc5fde1170.vir
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • virussign.com_58a16ee52472c4d27caf1e846a4d8560.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_5a545a4c5b3eb3038d6b5d524529d490.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • virussign.com_5bc75de3f5a5713ab928a825aeb7e400.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_5f385fee52954c783b8788cb0aa93c70.vir
    .exe windows:4 windows x86 arch:x86

    c06ddfbe3366daddf0cfd3e63c1b5390


    Headers

    Imports

    Sections

  • virussign.com_61e98579d11ffa1144d0c811eace51b0.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_654832355a48a8effc82a3b19ac90190.vir
    .exe windows:1 windows x86 arch:x86

    62ec3dce1eba1b68f6a4511bb09f8c2c


    Headers

    Imports

    Sections

  • virussign.com_6853ec4183381ad47242c17038bde470.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_68bf4acf3d18d8f25ac90104d73c1930.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • virussign.com_6b8bf6962dc93ac70db008709a1429d0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_6da019b611b2fe77605e230802105040.vir
    .dll windows:5 windows x86 arch:x86

    76812f441b0ed9d3cc0748af25d689a3


    Headers

    Imports

    Exports

    Sections

  • virussign.com_6e580bab9d3f91ae8c0da13b6bd46ba0.vir
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • virussign.com_708429ab2e288055789aa8319ba805f0.vir
    .exe windows:6 windows x64 arch:x64

    651bcbf20c2e3ff39a6ad2e93066c290


    Headers

    Imports

    Sections

  • virussign.com_7241c1052cc2b40a7d75bba20c510de0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_7589aba8d6745e4b6804136f5a655dd0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • virussign.com_75d08eecf4c75d932b1bc70b37e1a910.vir
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $APPDATA/1920Casino/list.dat
  • $PLUGINSDIR/SockDLL.dll
    .dll windows:5 windows x86 arch:x86

    ad67afe4fb0122bbaf949020f5217f27


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TGGui.dll
    .dll windows:5 windows x86 arch:x86

    a904427f86cae28709dad52453638375


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFile.dll
    .dll windows:4 windows x86 arch:x86

    bc2dec22623add29834c35d9141fa2a6


    Headers

    Imports

    Exports

    Sections

  • mainframe.ico
  • uninstall.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • virussign.com_79cb7c8211cfbd9f5986308916318610.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_7d47d0682ecb1d2c671a7b1724d0b090.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_8177eec39f6da7841e7e82ffb967f840.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_85091bd254f5293e66f901d6712e6320.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_854bf6c7b1a7f634f98aea069671e140.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • virussign.com_8878e49cf910e3cda275083de02474f0.vir
    .exe windows:4 windows x86 arch:x86

    60efa693a19725b0dd128cb84a9a313f


    Headers

    Imports

    Sections

  • virussign.com_8c5ffdb9c34c5894bca9dada9eabb1b0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_90f8e7d27cc1ac8fa4092e33523a83f0.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_94f0dcb6acee59600a62e846a35a7fc0.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_9672bdbeebba03dc737868846ec662d0.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • virussign.com_981892e71bcf6d848e14fdf1a1860420.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_9aa503fdc37531cea587923a5bc88370.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_9e6e561dc7ccbfca3f3513367d56d310.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_a20e53bc3500c1daa6edec47f9b9a770.vir
    .exe windows:4 windows x86 arch:x86

    c06ddfbe3366daddf0cfd3e63c1b5390


    Headers

    Imports

    Sections

  • virussign.com_a4abc30cbc4e7a95c9d90f537e6cc550.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_a57f0eba40c5fd549e3648f4ff5be110.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_a8a411f8d8def36649d15e0fd1ae6490.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_ab6b8e285573b8324bdfc395330e93b0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_ad8049fc6bce6ffc3e0a02c27fdd64a0.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_b05b801adebdec1fe6a28176d4d3fe50.vir
    .exe windows:4 windows x86 arch:x86

    c06ddfbe3366daddf0cfd3e63c1b5390


    Headers

    Imports

    Sections

  • virussign.com_b35c21accda5ca6caf7b3e56e1217cc0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_b556238b9cafb4364efaf98eee2b5360.vir
    .dll windows:5 windows x86 arch:x86

    c4c9ecfc26ca516a80b8f6f5b2bdb7e6


    Headers

    Imports

    Exports

    Sections

  • virussign.com_b5fd5331d744a6adb7d9d4af0216e7c0.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_b9048255c1793ec1a4f19fe7d40ce580.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_bb8b0eafd51dc417f50ae869458fb7f0.vir
    .exe windows:4 windows x86 arch:x86

    9a899bf0df62de42eb72127f4c296bac


    Headers

    Imports

    Sections

  • virussign.com_be5261ff71d8166b4f424430a02da380.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_c0e1afdeeae3c72923a59765b9edfcf0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_c39071ea001f4a0a308a2fde3dc6cef0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_c6304bac06b8ef30f1c0e51a0d261df0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_c840daaa36f9e102524ee9f98eca8a50.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_cb1556d4f35e9cb08ec28447511d54c0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_cda9a7821105d51b81a32f9167c042b0.vir
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • virussign.com_d07ce11d4d4e9ffa15139d4842760050.vir
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections

  • virussign.com_d34d9612500eaae0a410d0fda9d3db80.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_d64584c887e9ccf4e185da631ae267e0.vir
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections

  • virussign.com_d9244aba6db2b62393fea57c5909e620.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_db644081742693a78059ad14cf5c2dd0.vir
    .exe windows:4 windows x86 arch:x86

    a56ede9b87e5d7536b8d443df2531a2e


    Headers

    Imports

    Sections

  • virussign.com_ddcd82a411b847a0c4223fc127ecfe90.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_e0966a5691ecade17b153c3e44905330.vir
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • virussign.com_e326313077080369d5e5a0513a7a62f0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_e60deff791a090bfd7199292f50604d0.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_e8a47e54836efdb8690b49a05b997ab0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_eb643edc32e3f6c06c6a652dc2782820.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_ee574a8be5d77f8d8aa1f45a54aef220.vir
    .exe windows:4 windows x86 arch:x86

    ba23a556ac1d6444f7f76feafd6c8867


    Headers

    Imports

    Sections

  • virussign.com_f07309a2bc89476486a100f01d834c60.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_f169d725579969db1bd702f36c2172b0.vir
    .dll windows:4 windows x86 arch:x86

    47e57a5071fd75e61f1d975752e58f77


    Headers

    Imports

    Exports

    Sections

  • virussign.com_f2be2feef16d332d77ced97baa508190.vir
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • virussign.com_f32c4d6aa08e5b9f9dba40fbac0b6c00.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections

  • virussign.com_f58c51c5b6f536e1fa157fa3e25913a0.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_f8580d5d1c53e01eaae4dfdfcfaa14d0.vir
    .exe windows:4 windows x86 arch:x86

    8c16c795b57934183422be5f6df7d891


    Headers

    Imports

    Sections

  • virussign.com_fa595286beff423f6976da4da769ac10.vir
    .exe windows:5 windows x86 arch:x86

    2cdf968103e91f3d88ee3f0d963b7243


    Code Sign

    Headers

    Imports

    Sections

  • virussign.com_fcdd33478f56270ac8bbd0e25b247610.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • virussign.com_ffabe98566d8cda46264541ca1e492c0.vir
    .exe windows:4 windows x86 arch:x86

    5d6cad172c5535e4b6b6bbd246571621


    Headers

    Imports

    Sections