General

  • Target

    NEAS.80e219a458c3d9a8d4a2ca34af9a6750.exe

  • Size

    1.5MB

  • MD5

    80e219a458c3d9a8d4a2ca34af9a6750

  • SHA1

    f068fa6289ac6da6bfe70e4f7a234b23b8fef94d

  • SHA256

    5a04143d522692d83262c3661bffe9d3f418374a617b156555e231001d431126

  • SHA512

    3055320b7fcaeadde1bab604e323989ed1373f26b810073c37a39a2cbad49ad44f75acc5207cadaa0f573949a906feeb3bc8165eb24a9f27bae44bbcc1196f42

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQbOF+sabJKMC+DbwIfdgNSd:knw9oUUEEDl37jcmWH/xbnbJo+1gNW

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.80e219a458c3d9a8d4a2ca34af9a6750.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections