General

  • Target

    NEAS.01098aba573a5df5c6d5923d12479590.exe

  • Size

    2.1MB

  • MD5

    01098aba573a5df5c6d5923d12479590

  • SHA1

    c8b7bfd7c663d035d54e40d8d104649bd58c921e

  • SHA256

    d0ce8e2aecfeb924baf5d0a91a21bb9ff1391556515db1bf43fb7d7591f616d4

  • SHA512

    6b61100cfd67a14f9591b10f1a22f879ab03cb3e67b4a50dacae4825aa939149d03941bbec3b55344e4f6af06da2063bd048f4f06fb0677d8e9cf2a21edc2cf0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTopw824:NABy

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.01098aba573a5df5c6d5923d12479590.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections