General

  • Target

    NEAS.8b159d15d7c75ccc7396d637613c4880.exe

  • Size

    1.8MB

  • MD5

    8b159d15d7c75ccc7396d637613c4880

  • SHA1

    c257188f528141d7ff4133e7abb751d4cde5c9dd

  • SHA256

    0f7d67388077d82d4d1f0c4fec6333e273304ea6ab697bf8dee3e3e8899e3a98

  • SHA512

    e472abaa8e725bd91c5fd4b4bacba05fe393467b2a32b442377d47e0ac1b1fa1724e50f3a5bef0a6d77063e7e8c5c8cc4e90f9ca36dcb9f821c8140b28587428

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7D7Mp0b5jQanOKtvbyz36WjTBEqwtGH:ROdWCCi7/raWMmSdzw6QBTgPyK0r

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.8b159d15d7c75ccc7396d637613c4880.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections