General

  • Target

    NEAS.f344de67e843bf067f1cb3962d799680.exe

  • Size

    1.0MB

  • MD5

    f344de67e843bf067f1cb3962d799680

  • SHA1

    228471ee565ac2ddc6ef550f327a0f692a75a10c

  • SHA256

    bace8eeb0a0c0bbc871e4ec83e2a9bd6a6ef98ae6779557e82c8c3d0c69764fb

  • SHA512

    e4b534d081388502146789720bac18548cf5815e7c87639b023c7b150d7591ba5dc312d2b40ab475b792dd51832d7786a1619bb6cbc060a7fc87ce79e9574518

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqgC0qKpTIvGob:knw9oUUEEDl37jcqAqL3

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f344de67e843bf067f1cb3962d799680.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections