General

  • Target

    2c3cb9521925a0867c66a58d032ab4b0_NEAS

  • Size

    1.6MB

  • MD5

    2c3cb9521925a0867c66a58d032ab4b0

  • SHA1

    42a1fd1b4a89f64d3de9c078b72987d226e2f78c

  • SHA256

    772d762908da37b3a4e75b37daae4d48795367cd3e9d41e96fb8f854affeae43

  • SHA512

    1cbd4a34ed37bcfed6058576e816a2881fbfe503c775ebe0f0be979e6cac36cf27b97c5a65660a153499d4f339880dd55c8a7672364622d4a5a6dcfbd8b8b6f0

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8blOhG4zObcMyqqbziZVRZjsLDxPB+ti5:knw9oUUEEDlOuJc5cMKGPSvem

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c3cb9521925a0867c66a58d032ab4b0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections