General

  • Target

    48187bffd98a3900a4da5642541799c0_NEAS

  • Size

    1.8MB

  • MD5

    48187bffd98a3900a4da5642541799c0

  • SHA1

    57e3ad1cf8784494a949723cdd05026c3ec80ca9

  • SHA256

    81ed539131b3810bbf3aec8cc90531358a5e05cb76cd40493c1081ce71c2d761

  • SHA512

    0bc982c7c60dce202b079a3175815291f2368b8d8ff86ba6f24449cb19e895ad60687c2a7fad5b25ead7b5b9de54bd32d7ab814df5966f3d462fcc1a8a2096fe

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMKPIH2BOYAc:RWWBib356utgpPv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48187bffd98a3900a4da5642541799c0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections