General

  • Target

    NEAS.16f72f68e20f8dc7c542840216bac070.exe

  • Size

    1.8MB

  • MD5

    16f72f68e20f8dc7c542840216bac070

  • SHA1

    3406e833c49f87d5ad6c5965236a0ccad3e9a4d2

  • SHA256

    28feb724dd87c9d3c257afa37fa2db5f7d9bc0b8a74011d7c916eb70dc2dab3f

  • SHA512

    db3a461ff08c37d90479682f2c49a58bda35702a58ead4ffe5b72c1fdae224b62fd77653fc6b8de4bbb1a8afeeef4570f7454ec782785faa7785d480f712188e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYL+t6kw2bPUwz5qklM9T0re3Zh1:Lz071uv4BPMkibTIA5LDGTjAtC+M/S

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.16f72f68e20f8dc7c542840216bac070.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections