General

  • Target

    NEAS.ff01891d7b9d5f45cd49d51190499390.exe

  • Size

    2.1MB

  • MD5

    ff01891d7b9d5f45cd49d51190499390

  • SHA1

    27b27d5fdb69cca106bb5741f228c34b38a56f9d

  • SHA256

    8ffd49c85adb0c3ed62631f0dae3447da338241aeb8e4fad41c89ffd912c0605

  • SHA512

    b0bd00185a5773082bee0eeb7d1ecd0f412a3fd392b4b80ba8baa451dc263069bab4460c5bd4ebce6acb7cd8afc0f240b4909fc302b4ff4b21e4c2a1f5d48612

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIlMmSdbbUGs19WI:BemTLkNdfE0pZrP

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.ff01891d7b9d5f45cd49d51190499390.exe
    .exe windows:6 windows x64


    Headers

    Sections