Overview

overview

10

Static

static

10

NEAS.df67a...40.exe

windows7-x64

10

NEAS.df67a...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.df67af4a9f4bf20bec3f69fde5cfbf40.exe

  • Size

    1.3MB

  • MD5

    df67af4a9f4bf20bec3f69fde5cfbf40

  • SHA1

    b4e7b059f3e23b30b815329f8337477fc7d8fb28

  • SHA256

    ddf85ca88ba3c7ba9acfb04011cf93f0f885bd8d254034006e8827895c063653

  • SHA512

    fc58e9167eca5f5867e029b5a66f0837ce346fa9edab10751ee1880f6db34ea76ee73e51eb616fd0b960c9f27e891bea82e054ca3d186f92670704b6efd5ea03

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhn3AXXiuNmj6hvx:knw9oUUEEDlGUJ8YhOXL

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.df67af4a9f4bf20bec3f69fde5cfbf40.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections