General

  • Target

    89b36fd698301951b4f56936bb6ea1f0_NEAS

  • Size

    1.8MB

  • MD5

    89b36fd698301951b4f56936bb6ea1f0

  • SHA1

    c9dd4c3e30299a20f2b4e90fb132512518f482eb

  • SHA256

    a9df7c8ba6ab1e1d51422aa7407b9ac58d53dfccde1865ad59d4ff9160d50bf7

  • SHA512

    59b0cbfd63f0fdf04f45fcff17e5b707287a2bc06531399a24481c21ac54163d56685f29612ef99de2a9fcd3a8098c8a8b94951a6fab0d5ea26f260710d314f1

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQbOF+sabJKMC+DbwfHLjJ9+:knw9oUUEEDl37jcmWH/xbnbJo+OrPaNx

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 89b36fd698301951b4f56936bb6ea1f0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections