General

  • Target

    NEAS.5aa0c8f6ee543efc126e3fc171062b50.exe

  • Size

    1.6MB

  • MD5

    5aa0c8f6ee543efc126e3fc171062b50

  • SHA1

    395b78a6e750116a6e56da8d389778339a93fb9f

  • SHA256

    01a437d6256bdd07d06f3d34e0a4832ebf4dcd81a8e70b258677bde4b7e4e88d

  • SHA512

    e69f992b0803c6b0caf2cf862fdc7e306fa21ab697809b8f9a174b4730cca966d4512f047b0b4082df9803de06b4df61be1c3c6e9bbc0bafa91244830575b1e0

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARvKYYwdy2VlmNCQS5eyb+3J57OuaDayXDEjCO:ROdWCCi7/raZ5aIwC+Ax4ErLJ6Ioiw

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.5aa0c8f6ee543efc126e3fc171062b50.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections