General

  • Target

    NEAS.aa13cfb5dfe8fd43fe625d9f9b2c1a30.exe

  • Size

    1.9MB

  • MD5

    aa13cfb5dfe8fd43fe625d9f9b2c1a30

  • SHA1

    08e6c357a423cd8e56c59cc62d7552130a67bb1c

  • SHA256

    fd109bdfaca51f373fdfa36676b84936faf872c12b3064374b0dd42aec9f9220

  • SHA512

    a5c674b2c108dc07b0054550f89d7a070da7d9f4a820cb092fd1ae208322889af9dee3520a7e38122145e037197a06a10b4ee56e01c81f812752a2bdb3b30753

  • SSDEEP

    49152:ROdWCCi7/rah56uL3pgrCEdTKUHiCyI8BUs91Qo+j:RWWBiba56utgd

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.aa13cfb5dfe8fd43fe625d9f9b2c1a30.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections