General

  • Target

    NEAS.a3fe60369ae012e41c3699ffc89a6280.exe

  • Size

    895KB

  • MD5

    a3fe60369ae012e41c3699ffc89a6280

  • SHA1

    4668114bec924240b73f7a78c16d7de4a834db5b

  • SHA256

    4d4bfd1e1ce6e0a33a82890d5cd22cae21f5df090fe2c7b00920110cb9d6449d

  • SHA512

    5c8c8d2f2d9529241666f4de0818770dbf2a0fdfd2c436d9f7f347a6a69cb9986d611809bbb09a7557d979b084a7bd43c8290e5f18138958744c4f6d3390af95

  • SSDEEP

    12288:g2sJvQKR5LAU9pF65UdANIse0ryNlyrSB7x8slU8MCgAmSuOcHmnYhrDMTrban4/:fsJvQm7sK+/XrmNRlRZmSuODsrDMOn4/

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.a3fe60369ae012e41c3699ffc89a6280.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections