Overview

overview

10

Static

static

10

NEAS.c8fa3...50.exe

windows7-x64

10

NEAS.c8fa3...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

Errors

Reason
config extraction: GuloaderBin: guloader: invalid shellcode

General

  • Target

    NEAS.c8fa3c10cb8722b16e031821e1a30050.exe

  • Size

    1.1MB

  • MD5

    c8fa3c10cb8722b16e031821e1a30050

  • SHA1

    d2bd2502b153bd1293ca0c26b24c3ef7e180d414

  • SHA256

    23001b50a510e4181eaa42e46e60e36641d5d2737892f5e8f07fcfd978097ef6

  • SHA512

    2667c4c4d67f32d0ef4c3fb0931f69dc8c106a8cdd3a681929939322e7deed74afe2178a835db3b1c7835a6933528a53016b89f5f80bb0e311fb5bda0fafac9d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlgQ5aILMCfmAU7jEve:knw9oUUEEDld5aIwC+AcT

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.c8fa3c10cb8722b16e031821e1a30050.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections