General

  • Target

    4f297354aff401d6b52ed4f90e274d40_NEAS

  • Size

    1.8MB

  • MD5

    4f297354aff401d6b52ed4f90e274d40

  • SHA1

    248649cc0afd2828e58f585e9d20f86ee221b567

  • SHA256

    7a5f0e7219fb385214862f280c6c3957663d9a68fa481d43d7f36194a4b04ba1

  • SHA512

    13d2ef9c8212fab7a7ddc553adc13dbffb8a12eb4499752c30ec34b8d8b945e9c482731be132212b235a8c86c1ebed1fabb9d7410f7c045cfd9c30d4baa98849

  • SSDEEP

    49152:knw9oUUEEDl37jcmWH/xbbFN/NM5hAfvx:kQUEEM

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f297354aff401d6b52ed4f90e274d40_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections