General

  • Target

    4e5be8818fd27eea23b80b0c804d1790_NEAS

  • Size

    1.6MB

  • MD5

    4e5be8818fd27eea23b80b0c804d1790

  • SHA1

    43acafb88d30fbbb6c8c3c6f024d97f63b4ec4f9

  • SHA256

    bcd78ef111be9475df5846c171c06909db86b9b81ac8725d28d5782da451146f

  • SHA512

    2685fc907c6108db57ed193b39a83075af455e661adaf2cf86ea1a9732629e5d2a7a829d0659f5a29f2d8934d1d5c7c5b59e165f8d5d31eaa452f8ec38c0bce1

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K2PzORAwsHESSzT/:knw9oUUEEDl37jcqDrUS1pRA+T

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e5be8818fd27eea23b80b0c804d1790_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections