General

  • Target

    NEAS.e3167a647459daf9b96d2ee25172da20.exe

  • Size

    1.9MB

  • MD5

    e3167a647459daf9b96d2ee25172da20

  • SHA1

    c366367aaadbc370cdf1049b971faea6e0e6e7db

  • SHA256

    7856bcecaf24f1d6aa07fec5f1eb9d98e56b70181a9072651cc3119a58a11a8e

  • SHA512

    0641008e28dac68d0aaa635ca2293e1539b4d85d54f4b912e662e460ed161cbdab11ded24d4eb1c47dfb20057b078cbc1a37a7153c6ea62f5c770a75ba38e4d9

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vqal:NAB0

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.e3167a647459daf9b96d2ee25172da20.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections