General

  • Target

    1588cb3224a2d8ca937a8320f3c32f60_NEAS

  • Size

    1.7MB

  • MD5

    1588cb3224a2d8ca937a8320f3c32f60

  • SHA1

    f1ed329b34504677f2d68465a25be255fa897325

  • SHA256

    28280b40ad2559a7551ce5a6321e180dd3938cf96987742c9f6a6204ff696fe9

  • SHA512

    73e619cccee9517f8c34b6152830bf8cfb1f427dcf4d9e25bbe05bd04b236853c53857016c6cd170a0524dc27acb276f8d78b41a4ff29f230ecb113691a80592

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwxOpyinKCB92ofc6qjw/DL7lwYCmn2ZGwe1:knw9oUUEEDlnCNGofbPaiBtkun

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1588cb3224a2d8ca937a8320f3c32f60_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections