Errors

Reason
config extraction: GuloaderBin: guloader: invalid shellcode

General

  • Target

    NEAS.444fdb19a78514718210b4c037ba7d30.exe

  • Size

    1.1MB

  • MD5

    444fdb19a78514718210b4c037ba7d30

  • SHA1

    62794ff5648ba7b7785a12ca07c26b353f6ece71

  • SHA256

    28676cdce70d11df1de124c73b1db9c2ac818d8fc1e0a507f4549bac163e9257

  • SHA512

    11b5ead7a591db67c9318a1d5ddea8343a2390869a2b6a59575792bee957ca711a09e0a070adc555379bd5ca15504f08705fc62643475b67f066a2ae468fdc58

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlgQ5aILMCfmAU7jEv7:knw9oUUEEDld5aIwC+AcK

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.444fdb19a78514718210b4c037ba7d30.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections