General

  • Target

    561f5fe144048d6d48f94827177ff6f0_NEAS

  • Size

    1.7MB

  • MD5

    561f5fe144048d6d48f94827177ff6f0

  • SHA1

    073ad1ed92ceb7fdf4d4cbcfec63f08237b3d5da

  • SHA256

    38733fd03de4436f7710064ecb8a808e58d8d2fb8755109c85500dfb90170014

  • SHA512

    63fc398878b88a69de88f5c236c16a36a68bd2bd4a3fd35290331fbbcd8f060504516b0c8e6c3c2c9ddb92e56763b5c28c16142570efb5edec7660c7e7108399

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwxOpyiOyZ04a/fmituriGsvX4gbf2B+JQQ+:knw9oUUEEDlnCHOdfmO4RsB2BJQoQG

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 561f5fe144048d6d48f94827177ff6f0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections