General

  • Target

    4bbc5e98f952b045d894d2e9099d59b0_NEAS

  • Size

    1.6MB

  • MD5

    4bbc5e98f952b045d894d2e9099d59b0

  • SHA1

    0c1d121550f6aaae0abdd3752e77e8184278388f

  • SHA256

    8a949f90f1dc387ebeeca37fc85b0b2b9b9207a10797e1ebf8a92f6f7b213be0

  • SHA512

    672980b932fa974526eabc25abbe5564cea4818194ce9e7410dfdf93235cbc165c8d0eb6c2f3f79f3ce96dfc026704f3c73d5ca450b3fbd603a4945a35840e44

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727P/Q50xJiYYIFddXpa2q0sQyn8PE/DiTMHceHr3SqE:ROdWCCi7/rahw5UPeNliw8s/E/GYsI

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4bbc5e98f952b045d894d2e9099d59b0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections