General

  • Target

    396ae39346a64c95a02423ce67e7f790_NEAS

  • Size

    1.5MB

  • MD5

    396ae39346a64c95a02423ce67e7f790

  • SHA1

    2c0283cd902b1271ec131a64ef50929b88fe4693

  • SHA256

    6c61829bbca622ad4342eb52e2a136823ee5dad63b76d6e5f220ef627116390d

  • SHA512

    c6f0eebda262d13bd927dfb9c3fa79c9a507200f64ed9c9cdfc74c2a56298b911f50e54aa0b75b8c37a2edcb468855228f6470a73fcaf6b06f7316615e4d3615

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipfzaCtNcQcAupaXHeY5HmsoKTQXvaWDDj/Ev/H:Lz071uv4BPMki8CnfLv3zQXta

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 396ae39346a64c95a02423ce67e7f790_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections