General

  • Target

    3995db6ef02ab0fd3631c350e93b2630_NEAS

  • Size

    1.8MB

  • MD5

    3995db6ef02ab0fd3631c350e93b2630

  • SHA1

    4f6593cf88206912c1405dfa32e8b97b85ac6c69

  • SHA256

    b7a7dc7f49c27357b66a28c4d389db45b4004ee34fe903fde90838b024a1ff2d

  • SHA512

    6e9cd476accd52d7f63864574f5ac78b155a0c6965622f5f79e742c665e81c56edc0d612d0a1a185e64bc626e5f070774de7382b4afa86d2a38f69f694da74f9

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcWI:ROdWCCi7/raU56uL3pgrCEdMKPFoPC

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3995db6ef02ab0fd3631c350e93b2630_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections