General

  • Target

    4902e407bc5ef3f515059b477e910c00_NEAS

  • Size

    1.5MB

  • MD5

    4902e407bc5ef3f515059b477e910c00

  • SHA1

    517749583f50a1c961773394d266182106e5fffe

  • SHA256

    0457deb096ab6405359af44d5e5a1cc4ad56b8515a23e1969682d633c9c32211

  • SHA512

    3ae65ce0afe1aec82cb4951fa01b27603af14cbd6847f6a219e3b5d966095aac40d7a912dc8230cb699f3c422ef68e439fce641e31241e0d909b52f932409f8d

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMa6HcHd2JyY:ROdWCCi7/raU56uL3pgrCEd2EiTzQz9

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4902e407bc5ef3f515059b477e910c00_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections