General

  • Target

    NEAS.f6486849ca12db56509b8f3ebe2e9820.exe

  • Size

    1.6MB

  • MD5

    f6486849ca12db56509b8f3ebe2e9820

  • SHA1

    947eba41d52622aa12cc73c818c49214f8b214bb

  • SHA256

    798d286ec644250e1e8afb11d48361d7bf1388a5e6dc68b1380ddaa1a1ea27d4

  • SHA512

    a072ea71c08f73ca6f5b63bd9af7db3506dcab2fa7d70115fef3d0374b2220d6de59f3b139c4526191e36382b9abf38096c60602a6d5318c597422fb9a51d9a5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTJK/6qWyiY6q8P7:knw9oUUEEDlGUJ8Y9c87Me1/36FD

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f6486849ca12db56509b8f3ebe2e9820.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections