General

  • Target

    NEAS.f806c923107f4bd189e0dbd1eb30b640.exe

  • Size

    1.6MB

  • MD5

    f806c923107f4bd189e0dbd1eb30b640

  • SHA1

    67dbcae2d6a886b1e7e868856e35515af0297a61

  • SHA256

    f8982d24f83db834ece938a35eb6694db5e87533b4cb20dc9b59bfedbba25bc4

  • SHA512

    25d5d4a607f6f0be8558f3a8d0476c0d2fbb810c6ff3d7f44753418ca34c7b3fbf07be749182a5b7d25d3d99bce345251345e5731ea6dc0f0442085028af6902

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcWd:ROdWCCi7/raU56uL3pgrCEdMKPFoX

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f806c923107f4bd189e0dbd1eb30b640.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections