General

  • Target

    4aa5b94b3017c32d7389a5051776a0b0_NEAS

  • Size

    1.4MB

  • MD5

    4aa5b94b3017c32d7389a5051776a0b0

  • SHA1

    421864cac7a84819440360ad5d9b125cf127f000

  • SHA256

    8b559af22a767b5a6e40164f2fdd985bf3667c8a5004d5dcabe625c3e197f7cd

  • SHA512

    9d97f7b80f43ff50fe3ad2c34d0c7d1e07f09e961e349e2ac02c762754774fa4d98994b6208ae2771e84e4b50918436c9d0937c775f2c7a523e23bb75e37d31d

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PmK/lzapbU4w2DyA7lO1eANsT4kwu04a/wUB+/g:Lz071uv4BPm6lgVJUwAd+Y

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4aa5b94b3017c32d7389a5051776a0b0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections