General

  • Target

    6c5007d0bb6a4c63102765148eb8f270_NEAS

  • Size

    1.7MB

  • MD5

    6c5007d0bb6a4c63102765148eb8f270

  • SHA1

    91c8f205b97bd76a8028ec2e76609540f1407d60

  • SHA256

    060bf5a8c1e16042b1e14dcc138d0b0d6c306445ae45d7b2169f47b5d6b18415

  • SHA512

    899f253ccd7380b6510e13307654f18702d51222b9bab9d7afdde05725503e1b9b23b5553e4f148b318f25aec7bbf060cd29a229246f3d689800d537070a7bd1

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoCSxnhvuqAP9dbWmbOtP3SmZ5jNwEI:Lz071uv4BPMkHC0I6GCInhG1dtAtYh

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c5007d0bb6a4c63102765148eb8f270_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections