General

  • Target

    81b5cd23117e652334261537258d4b50_NEAS

  • Size

    1.7MB

  • MD5

    81b5cd23117e652334261537258d4b50

  • SHA1

    0cde0ead16e0b84c3b66d0c1ef5865d9b17e8ab9

  • SHA256

    dc2ef2bde2eb3f386977c6573d9839783000a3a643d58031e13c0e207b51fffc

  • SHA512

    1c73b65e162727555718eb187ebd492cb5934f6ba2c52ff896d70a0b92c3147b9ac12f854a1a3a142e64dfede69f451e684bf55154754944df95d446713c41a5

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARfHlivDQ3BzKdp+a8k4PUQu97411b3fnyJVfc:ROdWCCi7/raZ5aIwC+ABcizEU73724ou

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 81b5cd23117e652334261537258d4b50_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections