Overview

overview

10

Static

static

10

548c50d83d...AS.exe

windows7-x64

10

548c50d83d...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    548c50d83d5169423a5fcc706978c6a0_NEAS

  • Size

    1.7MB

  • MD5

    548c50d83d5169423a5fcc706978c6a0

  • SHA1

    9a15f99eaa6dde07f817d30cb692f402a48fb015

  • SHA256

    2eef3a6e2ffae796735ab765a07ee643a621cb209ee68a858d67cef7bd138eb0

  • SHA512

    bb40ec5bdb9ef9cdccbf45a0a50f71a5bdcdc8ff17b91f7482730a0f52952ea12f1e6277796faede453e53170765a1fc54d68a7a578bfd93b8922bb58a24f2ee

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjHiDxwkM:knw9oUUEEDlGUJ8Y9ctYVk68NdzK7jp

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 548c50d83d5169423a5fcc706978c6a0_NEAS
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections