General

  • Target

    NEAS.5f9d833b6d2078dac50981f554b3a800.exe

  • Size

    1.4MB

  • MD5

    5f9d833b6d2078dac50981f554b3a800

  • SHA1

    b37818b5cd5d26be005414ba14a7ddd9d356f416

  • SHA256

    e50fd2385b89bc9170489c154b75a14376e0b34b1917539238dc00292d06ba2f

  • SHA512

    9265b511acc2e9c85fd2ad4efccf0f50bd0916013ff0dce2742018cf2aac80e48901b0660a3f108842fbaf63bbf46e7e2303699f48e1e8533ce8ec0effbdda84

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q7W8bnngXEllvh7z9z8UuxW/ggwK+cre0TG:ROdWCCi7/raZbbnlD5/xs8R/G

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.5f9d833b6d2078dac50981f554b3a800.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections