General

  • Target

    NEAS.d8b158243b56f5b9f351763226f1f650.exe

  • Size

    1.3MB

  • MD5

    d8b158243b56f5b9f351763226f1f650

  • SHA1

    e15a5559576601d8895303834e6e7f15bbfd534a

  • SHA256

    da2565ea47b317e4a1436172c901b7518a548eabb025a465ef943808a6f1109d

  • SHA512

    6814ca8853ee6cd0c317b981796cf518c5e74be7f524ba272b96c969dc04bac28b6dcb1c676630295dd980fd6bb19a638dc9396d404f7fbc2bb294b071a22b8a

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q7W8bnngXEllvh7KPXcEeihhvRe/NL6:ROdWCCi7/raZbbnlD52UYk6

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d8b158243b56f5b9f351763226f1f650.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Sections