General

  • Target

    NEAS.f79d4a10298ea6279a0a104b8e204740.exe

  • Size

    1.7MB

  • MD5

    f79d4a10298ea6279a0a104b8e204740

  • SHA1

    8cfbca4b6aef3db4a8b84a4d80afba18e1a1a12c

  • SHA256

    13a965c396e042d0a54cb65ebfd0b48d40738f6d72edc187f8612c5dd3a9598d

  • SHA512

    fa1e477795082288ce5336336d7ec1fc4b7cea6c5e77dfa29e29b3386481cf94c7f18c9ed9b86fa31406e0d0a980c073715e8a7cdc6227009325d72d1865916d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcquVoVbvVkNgoZ1ssoRCjyocW+xB:knw9oUUEEDl37jcquVoVJjDNqi

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f79d4a10298ea6279a0a104b8e204740.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections