General

  • Target

    8bfa481bf55c4ed3b95f46f9e0314690_NEAS

  • Size

    1.6MB

  • MD5

    8bfa481bf55c4ed3b95f46f9e0314690

  • SHA1

    be76bf730f5d7e69b64b8f831a7278c5a6cf67bc

  • SHA256

    7282a8e3050bb7446fcae1aead4ccc06c378ee9a9c01c6ce69ae87628f0aace5

  • SHA512

    f84bdb1f4f99c0115a1d711562f7fdee33e8ab0c9d82a674fe0e752890b6786a48704930e248d4b123087c2f9b494816f7d921d9b2fd755d333d2b26e5a1a45f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8blOhG4zObcMyqqb29xAmfXOgPfogUVjd:knw9oUUEEDlOuJc5cMK2975ZUTr

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8bfa481bf55c4ed3b95f46f9e0314690_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections