General

  • Target

    119f39e79cc984e3a757c0701f7fbc20_NEAS

  • Size

    1.2MB

  • MD5

    119f39e79cc984e3a757c0701f7fbc20

  • SHA1

    c5f0d1b96e4b35a02a886c367a6f7cee8c41b697

  • SHA256

    e87eb15e0cd8a0ff69c7f79d42c9e5516190f32f3053204697527a719fa1da47

  • SHA512

    bbd63df295051c6105229d01a1ac8ad848807394d9be3972ac9b2dbcf1ee01bbecd3c7b38a47408dfd3034eea54271fb353d1a2d0da3618c905d7f460a687ee2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCasouX1IoPJ:knw9oUUEEDlGUrKoR

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 119f39e79cc984e3a757c0701f7fbc20_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections