General

  • Target

    43b9109042e1c5d79a0ba604fc4314f0_NEAS

  • Size

    1.5MB

  • MD5

    43b9109042e1c5d79a0ba604fc4314f0

  • SHA1

    57db2b0a5ba4446be41f518366bd4bb2e172b0f4

  • SHA256

    1668e851ff036ac6335e289d692cc561919ef440ae0053c3445f9a945ceb825a

  • SHA512

    9acf21da8d1cfe43e6d2849eb9a1b04f22120bab5917e7341de81ffc790e3496789eb1e4730847ebac02562b3880b9e51f4d7466d6df020422d3502744a8c82b

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMa6HcHd2Jyg:ROdWCCi7/raU56uL3pgrCEd2EiT2r

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 43b9109042e1c5d79a0ba604fc4314f0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections