General

  • Target

    NEAS.04cd89cfaddff0796fa3f575287a4700.exe

  • Size

    1.8MB

  • MD5

    04cd89cfaddff0796fa3f575287a4700

  • SHA1

    c5fe348dbcb3e2c78398c63ca0f69b3943386203

  • SHA256

    af788b68b734556a8ff3fd0c3b7611a2a5443706f531df7265dc43edc4c2bdf3

  • SHA512

    e1c00fb4096bdfe371b09f7ee20b108af3e6f42946aa3c9b0606ec2779ad9d678438179e50a5ac64d2c00e41f9440db5140d4156da601cb70556425f51001ac3

  • SSDEEP

    49152:ROdWCCi7/raZ5aIwC+A8Jh1Aa1dFCZvqujU:RWWBibV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.04cd89cfaddff0796fa3f575287a4700.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections