General

  • Target

    6a782f2b320fdc14d36a512f2ab94e70_NEAS

  • Size

    1.5MB

  • MD5

    6a782f2b320fdc14d36a512f2ab94e70

  • SHA1

    3a7dbfeb32249a78a284777a73564217099172f6

  • SHA256

    c5f2262e4e86c898c334b5aea5a8b05d0b25f76ba7443ef37b93f917d8bf1dc4

  • SHA512

    d0a11238f871813f240720872082ae816809258aa61a1cc04f7dfd7d036e28d6083266280f424021122efbbb38aacedeb806cdd8d603039201fe066880c9185d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9xyCyt0RCciNHV2m/VwUXC:knw9oUUEEDlnDwq6Sd0R7qV2mVRIE2

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a782f2b320fdc14d36a512f2ab94e70_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections