General

  • Target

    NEAS.c1f5414bddec99d284dd081797eb5e50.exe

  • Size

    1.8MB

  • MD5

    c1f5414bddec99d284dd081797eb5e50

  • SHA1

    ba95144fbe2ab68d2d40dc504a1fa97ad5ebeb17

  • SHA256

    22605b95142a082f4aff65a5eda47dd2d2a79280b26178a4ca4b45fc945f4141

  • SHA512

    fcc66d7e9412e458fd33e7ae8abb62d2ddca8c854aca92d2e4cd596d1f3da21b9b6ad47ac91cc77bff4368edbe0c3962006713d9dcd8308d0c5ca197ed711cce

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+A8Jh1Aa1dFCZvqujl9:RWWBibq

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.c1f5414bddec99d284dd081797eb5e50.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections