Overview

overview

10

Static

static

10

NEAS.a6f6c...30.exe

windows7-x64

10

NEAS.a6f6c...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a6f6c79b467d7d00ad3048a008e68030.exe

  • Size

    1.9MB

  • Sample

    231031-kwhtnadd7y

  • MD5

    a6f6c79b467d7d00ad3048a008e68030

  • SHA1

    4bc4370655571036679e5f019c6e8f46964cccfc

  • SHA256

    e418aa0277c6371d374713796dfc651d26aa752bd4613fe2a8888c7a8ebd411f

  • SHA512

    94e5d879c4495eebe27cbb4d54f26cb7a016211cee404f4fa2faf9a02ea871109cd4da4b36bbef3976fb02bd3070346804e34a0fd569d172023740217c9d886b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5I4TNrpDGgDQzsr0x:NABj

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      NEAS.a6f6c79b467d7d00ad3048a008e68030.exe

    • Size

      1.9MB

    • MD5

      a6f6c79b467d7d00ad3048a008e68030

    • SHA1

      4bc4370655571036679e5f019c6e8f46964cccfc

    • SHA256

      e418aa0277c6371d374713796dfc651d26aa752bd4613fe2a8888c7a8ebd411f

    • SHA512

      94e5d879c4495eebe27cbb4d54f26cb7a016211cee404f4fa2faf9a02ea871109cd4da4b36bbef3976fb02bd3070346804e34a0fd569d172023740217c9d886b

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5I4TNrpDGgDQzsr0x:NABj

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks