General

  • Target

    NEAS.1b657f74ab1178ffdaff8d19dd58f830.exe

  • Size

    1.6MB

  • MD5

    1b657f74ab1178ffdaff8d19dd58f830

  • SHA1

    cb52e2a0340b2f2b8d03f223b8a79bcc7fc25046

  • SHA256

    48a3bf54afd36326c8b4706c80dc04597d920521d3fa9998d9b1539a14c82d5d

  • SHA512

    84ac82137e67242ef03061ff3e424e74ecde2998a4b8ee0867a2a81ee39a2e1979a4a241367964ca3eb2e024480a0a1660fc074aae39f6a8315381ee64c05587

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcWz:ROdWCCi7/raU56uL3pgrCEdMKPFoTz9

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.1b657f74ab1178ffdaff8d19dd58f830.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections