General

  • Target

    NEAS.d4c1a80e0a3fa5a70e6633a48df9eff0.exe

  • Size

    1.0MB

  • MD5

    d4c1a80e0a3fa5a70e6633a48df9eff0

  • SHA1

    0b79d42d5922807b2c57e24126b4c910706b1a04

  • SHA256

    b9b3272081082a2a6b4fb4ca30a944fe36a8f537d806c907d32f810d8b1012e2

  • SHA512

    12850af246fe3488a8b8a9e14190886d26537b3d4d921d3e3f082ea1fc5722732e441a579fe3f6e8e121c4db24e03c3439ace2f1729bdfc2fe4a30258c5aaf7b

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2/yKutApnTZIbIgGT9g4:ROdWCCi7/raWfaTmL4

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d4c1a80e0a3fa5a70e6633a48df9eff0.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections