General

  • Target

    9139bac492b7fc874e8b0ea4bd635c40_NEAS

  • Size

    1.5MB

  • MD5

    9139bac492b7fc874e8b0ea4bd635c40

  • SHA1

    2218644b9117522529ce52f30415994293a39edb

  • SHA256

    8d0c4ed2cec76f1247d84c0d744a5de38e6e1d523d952077536d2b04abaa3d20

  • SHA512

    f18fe7469b185c5b4bb61aa7158cc5f4d8356630ddb3424ddcf947aad024802c5d3114b63ea099e598a26062c0698c4d41dbf68e966a65b46948eb9057c69313

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNIjTd7mCCN:Lz071uv4BPMkFfdk2auTxCN

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9139bac492b7fc874e8b0ea4bd635c40_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections