General

  • Target

    9197ef4093fb8396d0c8f5d274d78220_NEAS

  • Size

    1.3MB

  • MD5

    9197ef4093fb8396d0c8f5d274d78220

  • SHA1

    473cc1784a4797d394cb39dcc44a3b21b3f9478e

  • SHA256

    1bbdc697b642fb21e508af92c623c7aa4126640f10bd2fe627cd21eb7cbe79a7

  • SHA512

    e7b5354df55290ab1f5c1bd1a25f35d2a08adde951e6b235d00d7947f83734ef5ff197fbca15cbbbda26182c67aa76b5d3e64ae77d5308b2b5e2ada089af8265

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zcI3vG5Q1jMbcRId1:knw9oUUEEDl37jcq4xG5Q4X

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9197ef4093fb8396d0c8f5d274d78220_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections