General

  • Target

    NEAS.ed4820071c9738ad5071a19dd3bac690.exe

  • Size

    1.3MB

  • MD5

    ed4820071c9738ad5071a19dd3bac690

  • SHA1

    ff234a1e6a84eaf67a610b729cc2af0bee504c18

  • SHA256

    58508c88670abd9b3de121add04f950002e4c0cb7af3feb5a74ee336f5aa3690

  • SHA512

    b61265acab75d268aacf17c2a325e951242594237367b632da6aa5c51f3729954379ba0750d5f4d327192817ce8d13c090c9c52039c10cb8ac76c2fd94f06231

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1TqOMauFY3:knw9oUUEEDl37jcq4nP2

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.ed4820071c9738ad5071a19dd3bac690.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections