General

  • Target

    NEAS.50790f8e762720300998c14ab5738300.exe

  • Size

    1.7MB

  • MD5

    50790f8e762720300998c14ab5738300

  • SHA1

    62a5a5b8729ddc3ffc67f3f21b4b318a17b001e3

  • SHA256

    a6ca7bf610489a46f3480a4b4118d53533033f497e6e253baf761faedb5e7821

  • SHA512

    19dd502eb9f511eae88dc69b46bfac799cba4ce1d9131c238f92bc161f3447972be26f2884615d6d5a39413ee8e9032a371d87ef45cf4fd94d12f68f07e69f4a

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQIi2Wc/Bt1E7ltX1SOk9Fe/:knw9oUUEEDl37jcmWH/xW/X1I4v9zDK

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.50790f8e762720300998c14ab5738300.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections