General

  • Target

    NEAS.d64169e2d559b8a005f6b40b6689b100.exe

  • Size

    1.2MB

  • MD5

    d64169e2d559b8a005f6b40b6689b100

  • SHA1

    6d0f66824ee6d73d0be2b2b76fc93b9024c9743c

  • SHA256

    a46aef09fb393c6087a953731eb1d7c5060d87f2cab75dfd4d389c8231c35c17

  • SHA512

    c8e9756777ff71ecc81b7d6eafe2a4b5973626202e2b33f30440ad776df0b0afb3e5758b03d552781fe38c68898db09dfd5f46448d22fd4ebefa85d43aaeaea5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8blOhG4zObc0rgrMQHxBy:knw9oUUEEDlOuJc5c2yHy

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d64169e2d559b8a005f6b40b6689b100.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections