General

  • Target

    NEAS.ebd9897c3bed6868873117720a508cf0_JC.exe

  • Size

    1.5MB

  • MD5

    ebd9897c3bed6868873117720a508cf0

  • SHA1

    c8a5042cc2d48a40e36378ae092da7fa6407600c

  • SHA256

    bd8c7ef564a0ba771a7341360b55d9bdb4151cbf435d85a1972330f9599171f0

  • SHA512

    90efc479eba27ce6e81f230d033f740b5e2e4f58fb316168edbb190b0c9bf85cb3089ba346d6ebb3cd43132696877937077c3dd8bdd96c8213ae235bb3112eaa

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQbOF+sabJKMC+DbwMX90k:knw9oUUEEDl37jcmWH/xbnbJo+jB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.ebd9897c3bed6868873117720a508cf0_JC.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections