Overview

overview

10

Static

static

10

NEAS.00639...50.exe

windows7-x64

10

NEAS.00639...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.00639b8170647b06a80c4600c989de50.exe

  • Size

    2.1MB

  • MD5

    00639b8170647b06a80c4600c989de50

  • SHA1

    fb1f80bc5e32a0e28c5685e7054638741ba459d1

  • SHA256

    6f5940a8844b16c18e9c16abc3b9560b047106b7ef16c04cc95874f232fd6803

  • SHA512

    2a3a64ede94228eae6283e0f28123bb48b8310cc583a731f6c5d3a9be25c3ae3930d865e17a7b99dc158c196329aaaf080e301a7f8e4aa485df5dd9ba41fd316

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+A8JhhfmReJw:BemTLkNdfE0pZro

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.00639b8170647b06a80c4600c989de50.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections