General

  • Target

    48bf4e0544cae60028161696b3467410_NEAS

  • Size

    1.5MB

  • MD5

    48bf4e0544cae60028161696b3467410

  • SHA1

    df409a44da5df2b08ca24d1aa97065a2c9ab19f7

  • SHA256

    aca16cc54347d5391225325ae7cc387546e1570ac8f8ac02d66f0c76a616f1f7

  • SHA512

    ef6c077d2feb199a6f931df9b9088cd9cb50b8b6ae6c3da3f42c66e11d96d1d3389ce13843169199c9ad10660ec5edd41bc4750a2a3c265d8874043e07778485

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNIjTd7fQy:Lz071uv4BPMkFfdk2auTxfp

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48bf4e0544cae60028161696b3467410_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections