General

  • Target

    NEAS.79b12477e94f838264fd1983fca1a500.exe

  • Size

    1.5MB

  • MD5

    79b12477e94f838264fd1983fca1a500

  • SHA1

    b6ef7d465d02c83a60772ac955645cfe29e3b35a

  • SHA256

    fd9332dd28d16963cb3bab2d3a7c56e85d14ab68c1a5690c26aaddcf4e574115

  • SHA512

    e935e8ad2000e6a9160eb9be7af23db5c2fdc06e4bd04e359bf8f00e7dbeed4e1e9199c5a8d3218f770cff2e85ecdcdfb5930987427b8ab8b28f9776e1aab333

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOgOVGf6GrTcjXOcQ:knw9oUUEEDlGUh+hN4SW+Q

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.79b12477e94f838264fd1983fca1a500.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections