General

  • Target

    NEAS.48f5c9a83bae1cd6508a999b7cf53990.exe

  • Size

    1.6MB

  • MD5

    48f5c9a83bae1cd6508a999b7cf53990

  • SHA1

    1432a370060e04cb9babd6084538060784f8d892

  • SHA256

    b3bf57006d00fbed4d5fe0b9bf15c6f791159c5d844017281d4b82ce6849cff7

  • SHA512

    6ebd93151ec465d0a17fa3293f35984954f90f774ea4a660d97fb98f565a74623904c053e603edec7c9866cad21b7a4a19328649a8119cae6f1d7ef617bc65d8

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7D7Mp0M+I+gCCWcIoDgwTjpM8k1vKR:ROdWCCi7/raWMmSdl49R

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.48f5c9a83bae1cd6508a999b7cf53990.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections