General

  • Target

    NEAS.c9d3fd4d72f754434134ebdab6868520.exe

  • Size

    1.8MB

  • MD5

    c9d3fd4d72f754434134ebdab6868520

  • SHA1

    63e2bfa6a3d44d0f0edc86e1b8bfe5ea72f81a57

  • SHA256

    d049cbe20613ffc3dbac883e0b11d9d0b0730ebb4bfa8137063e8eeb92c419a3

  • SHA512

    3893c62ae4d8895bbcce9199372d7d4135b723a6e50d8418c098b6af49532e0d61dfef78dc751ab5777b81b99258bd9f50c9b2e0f2d9a7f3f8adfff48685e508

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtN:Lz071uv4BPMkibTIA5I4TNrpDG1R

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.c9d3fd4d72f754434134ebdab6868520.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections