General

  • Target

    NEAS.80da640fed807650189c961dcf41c200.exe

  • Size

    1.8MB

  • MD5

    80da640fed807650189c961dcf41c200

  • SHA1

    3c48d8d2c86d3ba22c6b7f706b4ad64a586538d1

  • SHA256

    c6a92c283e6ce0ddd3a59fcfdfdde689ad6a0654dd1fc8ac782e81197d180543

  • SHA512

    5bc76041efb1db9216c1dcee5bd6d66bea3deca078fd8a2fbb28299aebf3d1e266894ac605568ee365af1c888a277e8b09e724296b644a938025bea55147d465

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+A8Jh1Aa1dFCZvqujn:RWWBibg

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.80da640fed807650189c961dcf41c200.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections