General

  • Target

    NEAS.eb78ca2c6ce279806a6e447c55ec3f20.exe

  • Size

    1.9MB

  • MD5

    eb78ca2c6ce279806a6e447c55ec3f20

  • SHA1

    d6998f47f8ec181f1c287c76671109592b272fbb

  • SHA256

    21decfb7ed0458b1412aadf5708de3d4d21af8d58644dccd5e31065350935de0

  • SHA512

    3c86bce5c218f5b91415025ee65c24f0879e5c55f26386a0a1a1cd709f02e5253e85be69276c9c2c4a4d558e686a3834e329313eb9b79f2c464b7ec4fed3f455

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlW6m3pPu6Cc+gujcae7paq+AzGG8rSo5TrWuc0CN8D:knw9oUUEEDlM261ui8NW4O7QHh4zCH

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.eb78ca2c6ce279806a6e447c55ec3f20.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections