General

  • Target

    NEAS.541778a0ea16bed19a00788c008a5070.exe

  • Size

    1.5MB

  • MD5

    541778a0ea16bed19a00788c008a5070

  • SHA1

    8d1ceff5ef0f68becbaa16929aa2319876dad6c0

  • SHA256

    2a1420cb86a15e531eec4380a0abff06698a8b408084aae64b0e10257877af4c

  • SHA512

    840f3523c527d41e5d3eb49d3b3491045b73158fecd3ded0635ec405ee1d9a58685b2d4dfe7d16efb127bea188f1f14b72a3cd0e8ffb9cd9b81d6ee0e704842c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOgOZ/6kX:knw9oUUEEDlGUh+hNskX

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.541778a0ea16bed19a00788c008a5070.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections